Security Advisory

CVE-2019-16559

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-12-17 14:40:49
Last updated 2024-08-05 01:17:40
Assigner jenkins
State PUBLISHED

Description

A missing permission check in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers with Overall/Read permission to perform connection tests and determine whether files with an attacker-specified path exist on the Jenkins master file system.