deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-9491
Published: 2019-10-21
Description: Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-ANTI-THREAT-TOOLKIT-%28ATTK%29-REMOTE-CODE-EXECUTION.txt; http://packetstormsecurity.com/files/156160/TrendMicro-Anti-Threat-Toolkit-Improper-Fix.html; http://seclists.org/fulldisclosure/2019/Oct/42
CVE: CVE-2019-16967
Published: 2019-10-21
Description: An issue was discovered in Manager 13.x before 13.0.2.6 and 15.x before 15.0.6 before FreePBX 14.0.10.3. In the Manager module form (html\admin\modules\manager\views\form.php), an unsanitized managerdisplay variable coming from the URL is reflected in HTML, leading to XSS. It can be requested via GET request to /config.php?type=tool&display=manager.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/FreePBX/manager/commit/071a50983ca6a373bb2d1d3db68e9eda4667a372; https://issues.freepbx.org/browse/FREEPBX-20436; https://resp3ctblog.wordpress.com/2019/10/19/freepbx-xss-2/
CVE: CVE-2019-16968
Published: 2019-10-21
Description: An issue was discovered in FusionPBX up to 4.5.7. In the file app\conference_controls\conference_control_details.php, an unsanitized id variable coming from the URL is reflected in HTML on 2 occasions, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fusionpbx/fusionpbx/commit/02378c54722d89f875c66ddb00ff06468dabbc6d; https://resp3ctblog.wordpress.com/2019/10/19/fusionpbx-xss-1/; https://github.com/fusionpbx/fusionpbx/commit/02378c54722d89f875c66ddb00ff06468dabbc6d
CVE: CVE-2019-16970
Published: 2019-10-21
Description: In FusionPBX up to 4.5.7, the file app\sip_status\sip_status.php uses an unsanitized "savemsg" variable coming from the URL, which is reflected in HTML, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fusionpbx/fusionpbx/commit/a55f1cd5d8edd655058152e9acf212680d5b75f3; https://resp3ctblog.wordpress.com/2019/10/19/fusionpbx-xss-3/; https://github.com/fusionpbx/fusionpbx/commit/a55f1cd5d8edd655058152e9acf212680d5b75f3
CVE: CVE-2019-16969
Published: 2019-10-21
Description: In FusionPBX up to 4.5.7, the file app\fifo_list\fifo_interactive.php uses an unsanitized "c" variable coming from the URL, which is reflected in HTML, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fusionpbx/fusionpbx/commit/d3679bbeface57a21f6623cbc193b04a7fc0a885; https://resp3ctblog.wordpress.com/2019/10/19/fusionpbx-xss-2/; https://github.com/fusionpbx/fusionpbx/commit/d3679bbeface57a21f6623cbc193b04a7fc0a885
CVE: CVE-2019-16974
Published: 2019-10-21
Description: In FusionPBX up to 4.5.7, the file app\contacts\contact_times.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fusionpbx/fusionpbx/commit/bcc75d63aa5b721f699a2b416425943ad7707825; https://resp3ctblog.wordpress.com/2019/10/19/fusionpbx-xss-7/; https://github.com/fusionpbx/fusionpbx/commit/bcc75d63aa5b721f699a2b416425943ad7707825
CVE: CVE-2019-17220
Published: 2019-10-21
Description: Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title] line.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154944/Rocket.Chat-2.1.0-Cross-Site-Scripting.html; https://github.com/RocketChat/Rocket.Chat/commits/develop; https://github.com/RocketChat/Rocket.Chat/releases
CVE: CVE-2019-17498
Published: 2019-10-21
Description: In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.
CVSS Score: 8.1 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00026.html; http://packetstormsecurity.com/files/172835/libssh2-1.9.0-Out-Of-Bounds-Read.html; https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/
CVE: CVE-2019-16404
Published: 2019-10-21
Description: Authenticated SQL Injection in interface/forms/eye_mag/js/eye_base.php in OpenEMR through 5.0.2 allows a user to extract arbitrary data from the openemr database via a non-parameterized INSERT INTO statement, as demonstrated by the providerID parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/lodestone-security/CVEs/blob/master/CVE-2019-16404/README.md; https://github.com/lodestone-security/CVEs/blob/master/CVE-2019-16404/README.md
CVE: CVE-2019-17400
Published: 2019-10-21
Description: The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions/; https://github.com/unoconv/unoconv/pull/510; https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions/
CVE: CVE-2019-17424
Published: 2019-10-22
Description: A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/155378/nipper-ng-0.11.10-Remote-Buffer-Overflow.html; https://blog.vastart.dev/2019/10/stack-overflow-cve-2019-17424.html; https://code.google.com/archive/p/nipper-ng/source/default/source
CVE: CVE-2019-11674
Published: 2019-10-22
Description: Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid certificate validation and may result in a man-in-the-middle attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p4/data/release-notes-sspr-44-p4.html; https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p4/data/release-notes-sspr-44-p4.html
CVE: CVE-2019-12967
Published: 2019-10-22
Description: Stephan Mooltipass Moolticute through 0.42.1 (and possibly earlier versions) has Incorrect Access Control.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: https://github.com/mooltipass/moolticute/commits/master; https://securiteam.io/2019/10/20/cve-2019-12967-moolticute-improper-access-control/; https://github.com/mooltipass/moolticute/commits/master
CVE: CVE-2019-17189
Published: 2019-10-22
Description: totemodata 3.0.0_b936 has XSS via a folder name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.compass-security.com/en/research/advisories/; https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2019-021_totemodata_Cross-Site_Scripting_XSS.txt; https://www.totemo.com/en/solutions/secure-file-transfer
CVE: CVE-2019-4523
Published: 2019-10-22
Description: IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 165481.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/165481; https://supportcontent.ibm.com/support/pages/node/1073236; https://exchange.xforce.ibmcloud.com/vulnerabilities/165481
CVE: CVE-2017-8087
Published: 2019-10-22
Description: Information Leakage in PPPoE Packet Padding in AVM Fritz!Box 7490 with Firmware versions Fritz!OS 6.80 and 6.83 allows physically proximate attackers to view slices of previously transmitted packets or portions of memory via via unspecified vectors.
CVSS Score: 2.4 (LOW)
CWE: CWE-200
References: http://avm.com; http://fritzbox.com; http://seclists.org/fulldisclosure/2019/Oct/36
CVE: CVE-2019-10079
Published: 2019-10-22
Description: Apache Traffic Server is vulnerable to HTTP/2 setting flood attacks. Earlier versions of Apache Traffic Server didn't limit the number of setting frames sent from the client using the HTTP/2 protocol. Users should upgrade to Apache Traffic Server 7.1.7, 8.0.4, or later versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://lists.apache.org/thread.html/392108390cef48af647a2e47b7fd5380e050e35ae8d1aa2030254c04%40%3Cusers.trafficserver.apache.org%3E; https://lists.apache.org/thread.html/ad3d01e767199c1aed8033bb6b3f5bf98c011c7c536f07a5d34b3c19%40%3Cannounce.trafficserver.apache.org%3E; https://lists.apache.org/thread.html/bde52309316ae798186d783a5e29f4ad1527f61c9219a289d0eee0a7%40%3Cdev.trafficserver.apache.org%3E
CVE: CVE-2019-12147
Published: 2019-10-22
Description: The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username field. Upon successful exploitation, a remote unauthenticated user can create a local system user with sudo privileges, and use that user to login to the system (either via the web interface or via SSH) to achieve complete compromise of the device. This affects /var/webconfig/gui/Webconfig.inc.php and /usr/local/sng/bin/sng-user-mgmt.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-88
References: http://packetstormsecurity.com/files/154914/Sangoma-SBC-2.3.23-119-GA-Unauthenticated-User-Creation.html; http://seclists.org/fulldisclosure/2019/Oct/40; https://blog.appsecco.com
CVE: CVE-2019-12148
Published: 2019-10-22
Description: The Sangoma Session Border Controller (SBC) 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field. Upon successful exploitation, a remote unauthenticated user can login into the device's admin web portal without providing any credentials. This affects /var/webconfig/gui/Webconfig.inc.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-88
References: http://packetstormsecurity.com/files/154915/Sangoma-SBC-2.3.23-119-GA-Authentication-Bypass.html; http://seclists.org/fulldisclosure/2019/Oct/41; http://packetstormsecurity.com/files/154915/Sangoma-SBC-2.3.23-119-GA-Authentication-Bypass.html
CVE: CVE-2019-12290
Published: 2019-10-22
Description: GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punycoded Unicode characters (that would be discarded when converted first to a Unicode label and then back to an ASCII label), arbitrary domains can be impersonated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00009.html; https://gitlab.com/libidn/libidn2/commit/241e8f486134793cb0f4a5b0e5817a97883401f5
CVE: CVE-2015-9493
Published: 2019-10-22
Description: The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/my-wish-list/#developers; https://wpvulndb.com/vulnerabilities/7937; https://wordpress.org/plugins/my-wish-list/#developers
CVE: CVE-2015-9494
Published: 2019-10-22
Description: The indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor identifier.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpvulndb.com/vulnerabilities/7982; https://wpvulndb.com/vulnerabilities/7982
CVE: CVE-2015-9495
Published: 2019-10-22
Description: The syndication-links plugin before 1.0.3 for WordPress has XSS via the genericons/example.html anchor identifier.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/syndication-links/#developers; https://wpvulndb.com/vulnerabilities/7981; https://wordpress.org/plugins/syndication-links/#developers
CVE: CVE-2015-9496
Published: 2019-10-22
Description: The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substring.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpvulndb.com/vulnerabilities/7972; https://www.exploit-db.com/exploits/36942; https://wpvulndb.com/vulnerabilities/7972
CVE: CVE-2015-9497
Published: 2019-10-22
Description: The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://packetstormsecurity.com/files/131798/; https://wpvulndb.com/vulnerabilities/7974; https://packetstormsecurity.com/files/131798/
CVE: CVE-2015-9498
Published: 2019-10-22
Description: The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wordpress.org/plugins/wps-hide-login/#developers; https://wpvulndb.com/vulnerabilities/8011; https://wordpress.org/plugins/wps-hide-login/#developers
CVE: CVE-2015-9499
Published: 2019-10-22
Description: The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/espreto/wpsploit/blob/master/modules/exploits/unix/webapp/wp_showbiz_file_upload.rb; https://wpvulndb.com/vulnerabilities/7955; https://www.exploit-db.com/exploits/35385
CVE: CVE-2015-9500
Published: 2019-10-22
Description: The Exquisite Ultimate Newspaper theme 1.3.3 for WordPress has XSS via the anchor identifier to assets/js/jquery.foundation.plugins.js.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/131657/; https://packetstormsecurity.com/files/131657/
CVE: CVE-2019-15587
Published: 2019-10-22
Description: In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/flavorjones/loofah/issues/171; https://hackerone.com/reports/709009; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WK2UG7ORKRQOJ6E4XJ2NVIHYJES6BYZ/
CVE: CVE-2019-8089
Published: 2019-10-22
Description: Adobe Experience Manager Forms versions 6.3-6.5 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/aem-forms/apsb19-50.html; https://helpx.adobe.com/security/products/aem-forms/apsb19-50.html
CVE: CVE-2015-9501
Published: 2019-10-22
Description: The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/duchenerc/artificial-intelligence/commit/c70631b1f80518411df2f[PII_REDACTED]1110c6eac; https://wpvulndb.com/vulnerabilities/7994; https://github.com/duchenerc/artificial-intelligence/commit/c70631b1f80518411df2f[PII_REDACTED]1110c6eac
CVE: CVE-2019-16971
Published: 2019-10-22
Description: In FusionPBX up to 4.5.7, the file app\messages\messages_thread.php uses an unsanitized "contact_uuid" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fusionpbx/fusionpbx/commit/c48a160af53352ad1a43518b7d0faab16b8dfbcc; https://resp3ctblog.wordpress.com/2019/10/19/fusionpbx-xss-4/; https://github.com/fusionpbx/fusionpbx/commit/c48a160af53352ad1a43518b7d0faab16b8dfbcc
CVE: CVE-2019-16972
Published: 2019-10-22
Description: In FusionPBX up to 4.5.7, the file app\contacts\contact_addresses.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fusionpbx/fusionpbx/commit/913ad234cf145a55e5f2faaab08d776d83c1699b; https://resp3ctblog.wordpress.com/2019/10/19/fusionpbx-xss-5/; https://github.com/fusionpbx/fusionpbx/commit/913ad234cf145a55e5f2faaab08d776d83c1699b
CVE: CVE-2019-16973
Published: 2019-10-22
Description: In FusionPBX up to 4.5.7, the file app\contacts\contact_edit.php uses an unsanitized "query_string" variable coming from the URL, which is reflected in HTML, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/fusionpbx/fusionpbx/commit/cc820b2eb12a3b7070afdcb7f977f70a1d49ce49; https://resp3ctblog.wordpress.com/2019/10/19/fusionpbx-xss-6/; https://github.com/fusionpbx/fusionpbx/commit/cc820b2eb12a3b7070afdcb7f977f70a1d49ce49
CVE: CVE-2019-14276
Published: 2019-10-23
Description: WUSTL XNAT 1.7.5.3 allows XXE attacks via a POST request body.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://www.senseofsecurity.com.au/research/it-security-advisories.php; https://wiki.xnat.org/documentation/getting-started-with-xnat/what-s-new-in-xnat/xnat-1-7-5-4-1-7-5-6-release-notes; https://www.senseofsecurity.com.au/advisories/SOS-19-001
CVE: CVE-2019-10459
Published: 2019-10-23
Description: Jenkins Mattermost Notification Plugin 2.7.0 and earlier stored webhook URLs containing a secret token unencrypted in its global configuration file and job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/10/23/2; https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1628; http://www.openwall.com/lists/oss-security/2019/10/23/2
CVE: CVE-2019-10460
Published: 2019-10-23
Description: Jenkins Bitbucket OAuth Plugin 0.9 and earlier stored credentials unencrypted in the global config.xml configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/10/23/2; https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1546; http://www.openwall.com/lists/oss-security/2019/10/23/2
CVE: CVE-2019-10461
Published: 2019-10-23
Description: Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/10/23/2; https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1477; http://www.openwall.com/lists/oss-security/2019/10/23/2
CVE: CVE-2019-10462
Published: 2019-10-23
Description: A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/10/23/2; https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1483%20%281%29; http://www.openwall.com/lists/oss-security/2019/10/23/2
CVE: CVE-2019-10463
Published: 2019-10-23
Description: A missing permission check in Jenkins Dynatrace Application Monitoring Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276
References: http://www.openwall.com/lists/oss-security/2019/10/23/2; https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1483%20%282%29; http://www.openwall.com/lists/oss-security/2019/10/23/2
CVE: CVE-2019-10464
Published: 2019-10-23
Description: A cross-site request forgery vulnerability in Jenkins Deploy WebLogic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/10/23/2; https://jenkins.io/security/advisory/2019-10-23/#SECURITY-820; http://www.openwall.com/lists/oss-security/2019/10/23/2
CVE: CVE-2019-10465
Published: 2019-10-23
Description: A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-276
References: http://www.openwall.com/lists/oss-security/2019/10/23/2; https://jenkins.io/security/advisory/2019-10-23/#SECURITY-820; http://www.openwall.com/lists/oss-security/2019/10/23/2
CVE: CVE-2019-10466
Published: 2019-10-23
Description: An XML external entities (XXE) vulnerability in Jenkins 360 FireLine Plugin allows attackers with Overall/Read access to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2019/10/23/2; https://jenkins.io/security/advisory/2019-10-23/#SECURITY-822; http://www.openwall.com/lists/oss-security/2019/10/23/2
CVE: CVE-2019-10467
Published: 2019-10-23
Description: Jenkins Sonar Gerrit Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/10/23/2; https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1003; http://www.openwall.com/lists/oss-security/2019/10/23/2
CVE: CVE-2019-10468
Published: 2019-10-23
Description: A cross-site request forgery vulnerability in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/10/23/2; https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1005%20%281%29; http://www.openwall.com/lists/oss-security/2019/10/23/2
CVE: CVE-2019-10469
Published: 2019-10-23
Description: A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276
References: http://www.openwall.com/lists/oss-security/2019/10/23/2; https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1005%20%281%29; http://www.openwall.com/lists/oss-security/2019/10/23/2
CVE: CVE-2019-10470
Published: 2019-10-23
Description: A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276
References: http://www.openwall.com/lists/oss-security/2019/10/23/2; https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1005%20%282%29; http://www.openwall.com/lists/oss-security/2019/10/23/2