Github Oauth
Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins:github_oauth:*:*:*:*:*:jenkins:*:*
part: a version: * update: *
| Vendor | Jenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744) |
|---|---|
| Product | Github Oauth (fb603439-e92e-57ee-858a-2e8e8da14b31) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | jenkins |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1003019 |
vulnerable | 2026-06-08 05:12:21.413584 |
Details available
An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.
Published: 2019-02-06T16:00:00.000Z
Updated: 2024-09-16T20:37:33.126Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1003018 |
vulnerable | 2026-06-08 05:12:21.413197 |
Details available
An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm/config.jelly that allows attackers able to view a Jenkins administrator's web browser output, or control the browser (e.g. malicious extension) to retrieve the configured client secret.
Published: 2019-02-06T16:00:00.000Z
Updated: 2024-09-16T20:43:31.251Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.