Jenkins Libvirt Slaves vulnerabilities

3 known vulnerabilities affecting jenkins/libvirt_slaves.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2019-10471HIGHCVSS 8.8≤ 1.8.52019-10-23

CVE-2019-10471 [HIGH] CWE-352 CVE-2019-10471: A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to conn A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

CVE-2019-10472MEDIUMCVSS 6.5≤ 1.8.52019-10-23

CVE-2019-10472 [MEDIUM] CWE-276 CVE-2019-10472: A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permi A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

CVE-2019-10473MEDIUMCVSS 4.3≤ 1.8.52019-10-23

CVE-2019-10473 [MEDIUM] CWE-276 CVE-2019-10473: A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users wi A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.