Vulnerabilities > CVE-2019-10332 - Missing Authorization vulnerability in Jenkins Electricflow
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
LOW Availability impact
NONE Summary
A missing permission check in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 6 |