GHSA-hw83-jpxr-g225

ghsaUSosv

Jenkins Monitoring Plugin vulnerable to Denial of service vulnerability

view advisory published 2022-05-13Licence: CC-BY-4.0

A denial of service vulnerability exists in Jenkins Monitoring Plugin 1.74.0 and earlier in PluginImpl.java that allows attackers to kill threads running on the Jenkins master.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-1003022US	medium6.5	0.73% (54th)	—	2019-02-06
A denial of service vulnerability exists in Jenkins Monitoring Plugin 1.74.0 and earlier in PluginImpl.java that allows attackers to kill threads running on the Jenkins master.

references

External citations — patches, advisories, analysis.

https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1153WEB
https://nvd.nist.gov/vuln/detail/CVE-2019-1003022ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan