Lucene search
GoogleOSV:CVE-2019-10322HistoryMay 31, 2019 - 3:29 p.m.
CVE-2019-10322
2019-05-3115:29:00
Google
osv.dev
7
A missing permission check in Jenkins Artifactory Plugin 3.2.2 and earlier in ArtifactoryBuilder.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Related
github
github
Jenkins Artifactory Plugin missing permission check
2022-05-24 22:00:02
prion
prion
Design/Logic Flaw
2019-05-31 15:29:00
cvelist
cvelist
CVE-2019-10322
2019-05-31 14:20:19
osv
osv
Jenkins Artifactory Plugin missing permission check
2022-05-24 22:00:02
nvd
nvd
CVE-2019-10322
2019-05-31 15:29:00
cve
cve
CVE-2019-10322
2019-05-31 15:29:00
talos
talos
Jenkins Artifactory Plugin information disclosure vulnerability
2019-06-04 00:00:00