CVSS 3.0
5.9 mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2019-1003019
Medium (5.9) in jenkins github oauth. EPSS 0.9% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:github-oauth 0.31.
An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorized attackers to impersonate another user if they can control the pre-authentication session.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
- CWE
- CWE-384
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:github_oauth
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-mcqx-wc2j-qx9v | Maven | org.jenkins-ci.plugins:github-oauth | <0.31 | 0.31 |