Lucene search
PRIOn knowledge basePRION:CVE-2019-1003049HistoryApr 10, 2019 - 9:29 p.m.
Authentication flaw
2019-04-1021:29:00
PRIOn knowledge base
www.prio-n.com
10
Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject existing remoting-based CLI authentication caches.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jenkins | le | 2.164.1 | |
| jenkins | le | 2.171 | |
| communications_cloud_native_core_automated_test_suite | eq | 1.9.0 | |
| openshift_container_platform | eq | 3.11 |
Related
osv
osv
CVE-2019-1003049
2019-04-10 21:29:01
Insufficient Session Expiration in Jenkins
2022-05-13 01:01:01
CVE-2019-1003004
2019-01-22 14:29:00
alpinelinux
alpinelinux
CVE-2019-1003049
2019-04-10 21:29:01
cvelist
cvelist
CVE-2019-1003049
2019-04-10 20:12:29
CVE-2019-1003004
2019-01-22 14:00:00
redhatcve
redhatcve
CVE-2019-1003049
2019-04-15 03:50:05
CVE-2019-1003004
2020-04-09 10:33:33
nvd
nvd
CVE-2019-1003049
2019-04-10 21:29:01
CVE-2019-1003004
2019-01-22 14:29:00
github
github
Insufficient Session Expiration in Jenkins
2022-05-13 01:01:01
Improper Authorization in Jenkins Core
2022-05-13 01:05:22
cve
cve
CVE-2019-1003049
2019-04-10 21:29:01
CVE-2019-1003004
2019-01-22 14:29:00
openvas
openvas
Jenkins < 2.164.2 LTS and < 2.172 Multiple Vulnerabilities - Linux
2019-04-17 00:00:00
Jenkins < 2.164.2 LTS and < 2.172 Multiple Vulnerabilities - Windows
2019-04-17 00:00:00
Jenkins < 2.160 and < 2.150.2 LTS Multiple Vulnerabilities - Windows
2019-01-23 00:00:00
veracode
veracode
Weak Authentication
2019-07-08 00:06:43
Insecure Session Management
2019-05-16 03:24:12
prion
prion
Authorization
2019-01-22 14:29:00
nessus
nessus
Jenkins < 2.164.2 LTS / 2.172 Multiple Vulnerabilities
2019-04-18 00:00:00
Jenkins < 2.150.2 LTS / 2.160 Multiple Vulnerabilities
2019-01-23 00:00:00
archlinux
archlinux
[ASA-201904-7] jenkins: multiple issues
2019-04-11 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00