← CVE Intelligence

CVE-2019-10455

Jenkins project / Jenkins Rundeck Plugin PUBLISHED

Description (CNA)

A missing permission check in Jenkins Rundeck Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Rundeck Pluginaffected 3.6.5 and earlier

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.