Vulnerabilities > CVE-2019-10436 - Unspecified vulnerability in Jenkins Google Oauth Credentials

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

jenkins

NVD

Published: 2019-10-16

Updated: 2023-10-25

Summary

An arbitrary file read vulnerability in Jenkins Google OAuth Credentials Plugin 0.9 and earlier allowed attackers able to configure jobs and credentials in Jenkins to obtain the contents of any file on the Jenkins master.

Vulnerable Configurations

Part	Description	Count
Application	Jenkins Jenkins Google Oauth Credentials 0.1 Jenkins Google Oauth Credentials 0.2 Jenkins Google Oauth Credentials 0.3 Jenkins Google Oauth Credentials 0.4 Jenkins Google Oauth Credentials 0.5 Jenkins Google Oauth Credentials 0.6 Jenkins Google Oauth Credentials 0.7 Jenkins Google Oauth Credentials 0.8 Jenkins Google Oauth Credentials 0.9	9

References

https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1583