VYPR
← All advisories
Medium severity4.3NVD Advisory· Published May 21, 2019· Updated Jun 17, 2026

CVE-2019-10319

CVE-2019-10319

Description

A missing permission check in Jenkins PAM Authentication Plugin 1.5 and earlier, except 1.4.1 in PamSecurityRealm.DescriptorImpl#doTest allowed users with Overall/Read permission to obtain limited information about the file /etc/shadow and the user Jenkins is running as.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Jenkins Project/Pluggable Authentication Module6 versions
    cpe:2.3:a:jenkins:pluggable_authentication_module:1.0:*:*:*:*:jenkins:*:*+ 5 more
    • cpe:2.3:a:jenkins:pluggable_authentication_module:1.0:*:*:*:*:jenkins:*:*
    • cpe:2.3:a:jenkins:pluggable_authentication_module:1.1:*:*:*:*:jenkins:*:*
    • cpe:2.3:a:jenkins:pluggable_authentication_module:1.2:*:*:*:*:jenkins:*:*
    • cpe:2.3:a:jenkins:pluggable_authentication_module:1.3:*:*:*:*:jenkins:*:*
    • cpe:2.3:a:jenkins:pluggable_authentication_module:1.4:*:*:*:*:jenkins:*:*
    • cpe:2.3:a:jenkins:pluggable_authentication_module:1.5:*:*:*:*:jenkins:*:*
  • Jenkins Project/PAM Authentication Pluginllm-fuzzy2 versions
    <=1.5, except 1.4.1+ 1 more
    • (no CPE)range: <=1.5, except 1.4.1
    • (no CPE)range: 1.5 and earlier, except 1.4.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.