Medium severity4.3NVD Advisory· Published Oct 16, 2019· Updated Jun 17, 2026
CVE-2019-10439
CVE-2019-10439
Description
A missing permission check in Jenkins CRX Content Package Deployer Plugin 1.8.1 and earlier in various 'doFillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:crx-content-package-deployerMaven | < 1.9 | 1.9 |
Affected products
2- Range: 1.8.1 and earlier
Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-4cmq-88f8-53r5ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2019-10439ghsaADVISORY
- github.com/jenkinsci/crx-content-package-deployer-plugin/commit/06cd0e7e1b3f2fb87b3fa332ee1da710ca94b8e1ghsaWEB
- jenkins.io/security/advisory/2019-10-16/ghsaWEB
- jenkins.io/security/advisory/2019-10-16/nvd
News mentions
0No linked articles in our index yet.