Security Advisory

CVE-2019-1003017

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-02-06 16:00:00
Last updated 2024-09-17 02:26:18
Assigner jenkins
State PUBLISHED

Description

A data modification vulnerability exists in Jenkins Job Import Plugin 3.0 and earlier in JobImportAction.java that allows attackers to copy jobs from a preconfigured other Jenkins instance, potentially installing additional plugins necessary to load the imported jobs configuration.