Security Advisory

CVE-2019-10333

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-06-11 13:15:26
Last updated 2024-08-04 22:17:20
Assigner jenkins
State PUBLISHED

Description

Missing permission checks in Jenkins ElectricFlow Plugin 1.1.5 and earlier in various HTTP endpoints allowed users with Overall/Read access to obtain information about the Jenkins ElectricFlow Plugin configuration and configuration of connected ElectricFlow instances.