Jenkins Libvirt Slaves vulnerabilities
3 known vulnerabilities affecting jenkins/libvirt_slaves.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2019-10471P3HIGHCVSS 8.8≤ 1.8.52019-10-23
CVE-2019-10471 [HIGH] CWE-352 CVE-2019-10471: A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to conn
A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
nvd
CVE-2019-10472P3MEDIUMCVSS 6.5≤ 1.8.52019-10-23
CVE-2019-10472 [MEDIUM] CWE-276 CVE-2019-10472: A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permi
A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
nvd
CVE-2019-10473P4MEDIUMCVSS 4.3≤ 1.8.52019-10-23
CVE-2019-10473 [MEDIUM] CWE-276 CVE-2019-10473: A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users wi
A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
nvd