Executive brief
Jenkins WebSphere Deployer Plugin missing permission check
Affected products
- Maven org.jenkins-ci.plugins:websphere-deployer
Junglewise Threat Intelligence
CVE-2019-16559: Jenkins WebSphere Deployer Plugin missing permission check
CVE-2019-16559 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:websphere-deployer (Maven). Vendors: Maven.
Related threats
- XXE vulnerability in Jenkins WebSphere Deployer Plugin
- SSL/TLS certificate validation globally and unconditionally disabled by Jenkins WebSphere Deployer Plugin
- Cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin
- Jenkins WebSphere Deployer Plugin stores credentials in plain text