CVE-2019-10365

2019-07-3113:15:13

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission.

CPENameOperatorVersion
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.2.0
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.5.0
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.6.2
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.4.0
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.3.0
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.1.0

Name	Operator	Version
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.2.0
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.5.0
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.6.2
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.4.0
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.3.0
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.1.0