Cross-Site Request Forgery Vulnerability in Jenkins JX Resources Plugin Allows Credential Leakage

CVE-2019-10338 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed attackers to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials.

Learn more about our Cis Benchmark Audit For Kubernetes.