{"id":"CVE-2019-10344","details":"Missing permission checks in Jenkins Configuration as Code Plugin 1.24 and earlier in various HTTP endpoints allowed users with Overall/Read access to access the generated schema and documentation for this plugin containing detailed information about installed plugins.","aliases":["GHSA-mqr8-3v8j-46wv"],"modified":"2026-07-08T18:17:23.985978Z","published":"2019-07-31T13:15:12.290Z","references":[{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2019/07/31/1"},{"type":"ADVISORY","url":"https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1290"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/configuration-as-code-plugin","events":[{"introduced":"0"},{"last_affected":"7825210981cd14a840399de311007653ca39df8b"}],"database_specific":{"cpe":"cpe:2.3:a:jenkins:configuration_as_code:*:*:*:*:*:jenkins:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.24"}],"source":"CPE_RANGE"}}],"versions":["configuration-as-code-1.24","configuration-as-code-1.23","configuration-as-code-1.22","configuration-as-code-1.21","configuration-as-code-1.20","configuration-as-code-1.19","configuration-as-code-1.18","configuration-as-code-1.17","configuration-as-code-1.16","configuration-as-code-1.15","configuration-as-code-1.14","configuration-as-code-1.13","configuration-as-code-1.12","configuration-as-code-1.11","configuration-as-code-1.10","configuration-as-code-1.9","configuration-as-code-1.8","configuration-as-code-1.7","configuration-as-code-1.6","configuration-as-code-1.5","configuration-as-code-1.4","configuration-as-code-1.3","configuration-as-code-1.2","configuration-as-code-1.1","configuration-as-code-1.0","configuration-as-code-1.0-rc3","configuration-as-code-1.0-rc2","configuration-as-code-1.0-rc1","configuration-as-code-0.11-alpha","configuration-as-code-0.10-alpha","configuration-as-code-0.9-alpha","configuration-as-code-0.8-alpha","configuration-as-code-0.7-alpha","configuration-as-code-0.6-alpha","configuration-as-code-0.5-alpha","configuration-as-code-0.4-alpha","configuration-as-code-0.3-alpha","configuration-as-code-0.2-alpha","configuration-as-code-0.1-alpha"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10344.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}]}