NetSight
medium4.3

CVE-2019-10474

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on…

Impact

A missing permission check in Jenkins Global Post Script Plugin in allowed users with Overall/Read access to list the scripts available to the plugin stored on the Jenkins master file system.

Affected products

VendorProductAffected versions
JenkinsGlobal Post Script
through 1.1.4

Weakness classification

References