Detections
Analytics
CVE-2018-1999032
medium
Description
A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint.
References
https://github.com/advisories/GHSA-pwrm-8mvm-p2f2
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-995