Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-07-11	CVE-2019-10342	Missing Authorization vulnerability in Jenkins Docker A missing permission check in Jenkins Docker Plugin 1.1.6 and earlier in various 'fillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins. network low complexity jenkins CWE-862	4.3
2019-07-11	CVE-2019-10341	Missing Authorization vulnerability in Jenkins Docker A missing permission check in Jenkins Docker Plugin 1.1.6 and earlier in DockerAPI.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. network low complexity jenkins CWE-862	6.5