Lucene search
GoogleOSV:GHSA-GRMG-5Q49-MQMFHistoryMay 14, 2022 - 1:38 a.m.
Jenkins Crowd 2 Integration Plugin server-side request forgery vulnerability
2022-05-1401:38:17
Google
osv.dev
7
jenkins
integration
plugin
server-side
forgery
vulnerability
authorization
crowdsecurityrealm
connection
test
credentials
settings
An improper authorization vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java that allows attackers to have Jenkins perform a connection test, connecting to an attacker-specified server with attacker-specified credentials and connection settings.
Related
github
github
Jenkins Crowd 2 Integration Plugin server-side request forgery vulnerability
2022-05-14 01:38:17
cvelist
cvelist
CVE-2018-1000422
2019-01-09 23:00:00
veracode
veracode
Authorization Bypass
2019-01-10 02:20:15
prion
prion
Authorization
2019-01-09 23:29:00
cve
cve
CVE-2018-1000422
2019-01-09 23:29:02
nvd
nvd
CVE-2018-1000422
2019-01-09 23:29:02