Jx Resources

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-10339 Jun 11, 14:29 Maven HIGH PATCH This Week

A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed users with Overall/Read access to have Jenkins connect to an. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Kubernetes Jenkins Jx Resources

NVD

CVSS 3.1

8.8

EPSS

1.8%

CVE-2019-10338 Jun 11, 14:29 Maven HIGH PATCH This Week

A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed attackers to have Jenkins connect to an. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Kubernetes CSRF Jenkins Jx Resources

NVD

CVSS 3.0

8.8

EPSS

1.0%

CVE-2019-10339 Maven

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Authentication Bypass Kubernetes Jenkins +1

NVD

CVE-2019-10338 Maven

EPSS 1% CVSS 8.8

HIGH PATCH This Week

Kubernetes CSRF Jenkins +1

NVD