Search/CVE-2019-1003049
● CVE — High

CVE-2019-1003049

Vendorredhat, jenkins, oracleProductopenshift container platform, jenkins, communications cloud native core automated test suiteDiscoveredApr 10, 2019UpdatedNov 21, 2024

Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject existing remoting-based CLI authentication caches.

View graph Watch Export
CVSS v3.1
8.1 HIGH
EPSS
2.11%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
4 relationships
Timeline
disclosure → media coverage
Apr 10, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024