ALPINE-CVE-2019-1003049

Source
https://security.alpinelinux.org/vuln/CVE-2019-1003049
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-1003049.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2019-1003049
Upstream
Published
2019-04-10T21:29:01Z
Modified
2026-11-03T06:32:28Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject existing remoting-based CLI authentication caches.

References

Affected packages

Alpine:v3.9 / jenkins

Package

Name
jenkins
Purl
pkg:apk/alpine/jenkins?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.164.2-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2019-1003049.json"