CVE-2019-10339

CVE-2019-10339

A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed users with Overall/Read access to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials.

Source: CVE-2019-10339

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다