Jx Resources

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-10339 Maven HIGH PATCH This Week

A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed users with Overall/Read access to have Jenkins connect to an. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Kubernetes Jx Resources

NVD

CVSS 3.1

8.8

EPSS

1.8%

CVE-2019-10338 Maven HIGH PATCH This Week

A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed attackers to have Jenkins connect to an. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Jenkins Kubernetes CSRF Jx Resources

NVD

CVSS 3.0

8.8

EPSS

1.0%

CVE-2019-10339 Maven

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Authentication Bypass Jenkins Kubernetes +1

NVD

CVE-2019-10338 Maven

EPSS 1% CVSS 8.8

HIGH PATCH This Week

Jenkins Kubernetes CSRF +1

NVD