CVE-2019-16547

—

CVSS 3.1

4.3 medium

EPSS

<1%p51

Published

Nov 21, 2019 (Nov 21, 2019)

Modified

Jun 17, 2026

Description

Missing permission checks in various API endpoints in Jenkins Google Compute Engine Plugin 4.1.1 and earlier allow attackers with Overall/Read permission to obtain limited information about the plugin configuration and environment.

Vendors: jenkins
Products: google compute engine
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.