{"id":"CVE-2019-10455","published":"2019-10-16T13:00:53Z","modified":"2024-08-04T22:24:18Z","title":"A missing permission check in Jenkins Rundeck Plugin allows attackers with Overall/Read permission to connect to an…","vendor":"Jenkins","product":"Jenkins Rundeck Plugin","tier":"tail","description":{"text":"A missing permission check in Jenkins Rundeck Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00643,"percentile":0.50505,"provenance":"source"},"cwes":[],"references":[{"url":"https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1460","tags":["x_refsource_CONFIRM"]}],"priority":{"score":10.1,"factors":[{"name":"EPSS percentile","points":10.1}]},"vendorSlug":"jenkins","affectedVersions":[{"vendor":"Jenkins project","product":"Jenkins Rundeck Plugin","versions":["3.6.5 and earlier"]}],"affected":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:rundeck","vulnerableRanges":["<3.6.6"],"patched":["3.6.6"],"from":["GHSA-p4f7-7c33-9675"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-4674","exploited":false,"provenance":"source"}}