---

CVE-2019-10354 - log back

CVE-2019-10354 created at 25 Sep 2019 19:31:40
Severity	+ High
Remote	+ Remote
Type	+ Access restriction bypass
Description	+ A security issue has been found in Jenkins before 2.186. Jenkins uses the Stapler web framework to render its UI views. These views are frequently comprised of several view fragments, enabling plugins to extend existing views with more content. In some cases attackers could directly access a view fragment containing sensitive information, bypassing any permission checks in the corresponding view.
References	+ https://jenkins.io/security/advisory/2019-07-17/
Notes