Jenkins Project Jenkins Libvirt Slaves Plugin vulnerabilities
3 known vulnerabilities affecting jenkins_project/jenkins_libvirt_slaves_plugin.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2019-10471HIGHCVSS 8.8v1.8.5 and earlier2019-10-23
CVE-2019-10471 [HIGH] CWE-352 CVE-2019-10471: A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to conn
A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
cvelistv5nvd
CVE-2019-10473MEDIUMCVSS 4.3v1.8.5 and earlier2019-10-23
CVE-2019-10473 [MEDIUM] CWE-276 CVE-2019-10473: A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users wi
A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
cvelistv5nvd
CVE-2019-10472MEDIUMCVSS 6.5v1.8.5 and earlier2019-10-23
CVE-2019-10472 [MEDIUM] CWE-276 CVE-2019-10472: A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permi
A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
cvelistv5nvd