Executive brief
SSRF vulnerability due to missing permission check in Fortify on Demand Uploader Plugin
Affected products
- Maven org.jenkins-ci.plugins:fortify-on-demand-uploader
Junglewise Threat Intelligence
CVE-2019-1003047: SSRF vulnerability due to missing permission check in Fortify on Demand Uploader Plugin
CVE-2019-1003047 · Severity: low · CVSS 3.1 · Published 2022-05-13
Technologies: org.jenkins-ci.plugins:fortify-on-demand-uploader (Maven). Vendors: Maven.
Related threats
- Missing permission checks in Jenkins Fortify on Demand Plugin
- CSRF vulnerability in Jenkins Fortify on Demand Plugin
- Users with Overall/Read access could enumerate credentials IDs in Jenkins Fortify on Demand Plugin
- Jenkins Fortify on Demand Plugin stores credentials in plain text
- Jenkins Fortify on Demand Uploader Plugin CSRF vulnerability