Vulnerability Details : CVE-2019-10436
An arbitrary file read vulnerability in Jenkins Google OAuth Credentials Plugin 0.9 and earlier allowed attackers able to configure jobs and credentials in Jenkins to obtain the contents of any file on the Jenkins master.
Products affected by CVE-2019-10436
- cpe:2.3:a:jenkins:google_oauth_credentials:*:*:*:*:*:jenkins:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-10436
0.07%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 27 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-10436
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
8.0
|
2.9
|
NIST | |
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
2.8
|
3.6
|
NIST |
References for CVE-2019-10436
-
https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1583
Jenkins Security Advisory 2019-10-16Vendor Advisory
Jump to