PT-2019-11320 · Jenkins · Jenkins Monitoring Plugin+1

Daniel Beck

·

CVE-2019-1003022

·

Publicado

2019-02-06

·

Atualizado

2023-10-25

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Jenkins Monitoring Plugin versions 1.74.0 and earlier
Description: A denial of service issue exists that allows attackers to kill threads running on the Jenkins master. This is due to a vulnerability in the PluginImpl.java file.
Recommendations: For Jenkins Monitoring Plugin versions 1.74.0 and earlier, update to a version later than 1.74.0 to resolve the issue.

Correção

DoS

CSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2019-1003022
GHSA-HW83-JPXR-G225

Produtos afetados

Jenkins
Jenkins Monitoring Plugin