logo

Database

Improper authorization control for web services In org.jenkins-ci.plugins:pam-auth

Description

Missing Authorization

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2019-103192. NVD-2019-103193. OSV-2019-103194. GHSA-xqwq-jxjh-wj825. GCVE-2019-10319

References

1. https://jenkins.io/security/advisory/2019-05-21/#SECURITY-13162. http://www.openwall.com/lists/oss-security/2019/05/21/13. https://github.com/jenkinsci/pam-auth-plugin/commit/a9d8314706d6d7645e49f2c9607baa7758af29cd

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.