{"action":"Upgrade org.jenkins-ci.plugins:rundeck to 3.6.6 or later.","affected":[{"fixed":"3.6.6","introduced":"0"}],"component":"org.jenkins-ci.plugins:rundeck","cve_ids":["CVE-2019-10455"],"ecosystem":"Maven","epss":0.00643,"exploited":false,"fixed_versions":["3.6.6"],"ghsa_id":"GHSA-p4f7-7c33-9675","id":"tcs_01M5N96DWT5FSEN83ECMFMQK80","modified_at":"2024-02-16T08:08:07.219581Z","published_at":"2022-05-24T16:58:50Z","references":["https://osv.dev/vulnerability/GHSA-p4f7-7c33-9675","https://nvd.nist.gov/vuln/detail/CVE-2019-10455","https://github.com/jenkinsci/rundeck-plugin/commit/68177fc53f40d038233c9d54f3d59fdee9d6ced0","https://github.com/jenkinsci/rundeck-plugin/commit/f0d115f14a9d2b0bfe4a33f1dc68aa637430b8ed","https://github.com/jenkinsci/rundeck-plugin","https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1460"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-p4f7-7c33-9675","url":"https://osv.dev/vulnerability/GHSA-p4f7-7c33-9675"}],"summary":"Missing permission check in Jenkins Rundeck Plugin"}