Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-1003062 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:16.855Z Vendors: Jenkins project Products: Jenkins AWS CloudWatch Logs Publisher Plugin Description: Jenkins AWS CloudWatch Logs Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-830
CVE ID: CVE-2019-1003063 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.889Z Vendors: Jenkins project Products: Jenkins Amazon SNS Build Notifier Plugin Description: Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-832
CVE ID: CVE-2019-1003064 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.883Z Vendors: Jenkins project Products: Jenkins aws-device-farm Plugin Description: Jenkins aws-device-farm Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-835
CVE ID: CVE-2019-1003065 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.937Z Vendors: Jenkins project Products: Jenkins CloudShare Docker-Machine Plugin Description: Jenkins CloudShare Docker-Machine Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-838
CVE ID: CVE-2019-1003066 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:16.826Z Vendors: Jenkins project Products: Jenkins Bugzilla Plugin Description: Jenkins Bugzilla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-841
CVE ID: CVE-2019-1003067 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.950Z Vendors: Jenkins project Products: Jenkins Trac Publisher Plugin Description: Jenkins Trac Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-842
CVE ID: CVE-2019-1003068 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.852Z Vendors: Jenkins project Products: Jenkins VMware vRealize Automation Plugin Description: Jenkins VMware vRealize Automation Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-945
CVE ID: CVE-2019-1003069 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.834Z Vendors: Jenkins project Products: Jenkins Aqua Security Scanner Plugin Description: Jenkins Aqua Security Scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-949
CVE ID: CVE-2019-1003070 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.887Z Vendors: Jenkins project Products: Jenkins veracode-scanner Plugin Description: Jenkins veracode-scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-952
CVE ID: CVE-2019-1003071 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.836Z Vendors: Jenkins project Products: Jenkins OctopusDeploy Plugin Description: Jenkins OctopusDeploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-957
CVE ID: CVE-2019-1003072 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.947Z Vendors: Jenkins project Products: Jenkins WildFly Deployer Plugin Description: Jenkins WildFly Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-961
CVE ID: CVE-2019-1003073 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.888Z Vendors: Jenkins project Products: Jenkins VS Team Services Continuous Deployment Plugin Description: Jenkins VS Team Services Continuous Deployment Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-962
CVE ID: CVE-2019-1003074 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.896Z Vendors: Jenkins project Products: Jenkins Hyper.sh Commons Plugin Description: Jenkins Hyper.sh Commons Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-964
CVE ID: CVE-2019-1003075 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.907Z Vendors: Jenkins project Products: Jenkins Audit to Database Plugin Description: Jenkins Audit to Database Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-966
CVE ID: CVE-2019-1003076 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.920Z Vendors: Jenkins project Products: Jenkins Audit to Database Plugin Description: A cross-site request forgery vulnerability in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection form validation method allows attackers to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-977
CVE ID: CVE-2019-1003077 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.906Z Vendors: Jenkins project Products: Jenkins Audit to Database Plugin Description: A missing permission check in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-977
CVE ID: CVE-2019-1003078 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.909Z Vendors: Jenkins project Products: Jenkins VMware Lab Manager Slaves Plugin Description: A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979
CVE ID: CVE-2019-1003079 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:18.248Z Vendors: Jenkins project Products: Jenkins VMware Lab Manager Slaves Plugin Description: A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979
CVE ID: CVE-2019-1003080 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.947Z Vendors: Jenkins project Products: Jenkins OpenShift Deployer Plugin Description: A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-981
CVE ID: CVE-2019-1003081 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:18.074Z Vendors: Jenkins project Products: Jenkins OpenShift Deployer Plugin Description: A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-981
CVE ID: CVE-2019-1003082 State: PUBLISHED Published: 2019-04-04T15:38:48 Last Updated: 2024-08-05T03:07:17.951Z Vendors: Jenkins project Products: Jenkins Gearman Plugin Description: A cross-site request forgery vulnerability in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-991
CVE ID: CVE-2019-1003083 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:18.210Z Vendors: Jenkins project Products: Jenkins Gearman Plugin Description: A missing permission check in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-991
CVE ID: CVE-2019-1003084 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:18.090Z Vendors: Jenkins project Products: Jenkins Zephyr Enterprise Test Management Plugin Description: A cross-site request forgery vulnerability in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-993
CVE ID: CVE-2019-1003085 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:18.272Z Vendors: Jenkins project Products: Jenkins Zephyr Enterprise Test Management Plugin Description: A missing permission check in Jenkins Zephyr Enterprise Test Management Plugin in the ZeeDescriptor#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-993
CVE ID: CVE-2019-1003086 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:17.882Z Vendors: Jenkins project Products: Jenkins Chef Sinatra Plugin Description: A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1037
CVE ID: CVE-2019-1003087 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:18.269Z Vendors: Jenkins project Products: Jenkins Chef Sinatra Plugin Description: A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1037
CVE ID: CVE-2019-1003088 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:18.056Z Vendors: Jenkins project Products: Jenkins Fabric Beta Publisher Plugin Description: Jenkins Fabric Beta Publisher Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1043
CVE ID: CVE-2019-1003089 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:17.892Z Vendors: Jenkins project Products: Jenkins Upload to pgyer Plugin Description: Jenkins Upload to pgyer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1044
CVE ID: CVE-2019-1003090 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:17.956Z Vendors: Jenkins project Products: Jenkins SOASTA CloudTest Plugin Description: A cross-site request forgery vulnerability in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form validation method allows attackers to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1054
CVE ID: CVE-2019-1003091 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:18.227Z Vendors: Jenkins project Products: Jenkins SOASTA CloudTest Plugin Description: A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpl#doValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1054
CVE ID: CVE-2019-1003092 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:18.039Z Vendors: Jenkins project Products: Jenkins Nomad Plugin Description: A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1058
CVE ID: CVE-2019-1003093 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:17.983Z Vendors: Jenkins project Products: Jenkins Nomad Plugin Description: A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1058
CVE ID: CVE-2019-1003094 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:18.257Z Vendors: Jenkins project Products: Jenkins Open STF Plugin Description: Jenkins Open STF Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1059
CVE ID: CVE-2019-1003095 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:17.933Z Vendors: Jenkins project Products: Jenkins Perfecto Mobile Plugin Description: Jenkins Perfecto Mobile Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1061
CVE ID: CVE-2019-1003096 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:18.235Z Vendors: Jenkins project Products: Jenkins TestFairy Plugin Description: Jenkins TestFairy Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1062
CVE ID: CVE-2019-1003097 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:18.347Z Vendors: Jenkins project Products: Jenkins Crowd Integration Plugin Description: Jenkins Crowd Integration Plugin stores credentials unencrypted in the global config.xml configuration file on the Jenkins master where they can be viewed by users with access to the master file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1069
CVE ID: CVE-2019-1003098 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:18.292Z Vendors: Jenkins project Products: Jenkins openid Plugin Description: A cross-site request forgery vulnerability in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows attackers to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1084
CVE ID: CVE-2019-1003099 State: PUBLISHED Published: 2019-04-04T15:38:49 Last Updated: 2024-08-05T03:07:17.966Z Vendors: Jenkins project Products: Jenkins openid Plugin Description: A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107790 - http://www.openwall.com/lists/oss-security/2019/04/12/2 - https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1084