org.jenkins-ci.plugins:labmanager

3 results · Clear filters · Feed

• Medium 6.5
  CVE-2019-10382

  Jenkins VMware Lab Manager Slaves Plugin vulnerable to Improper Certificate Validation

  Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

  Jenkins Project Jenkins VMware Lab Manager Slaves Plugin org.jenkins-ci.plugins:labmanager Web / CMS Maven
  Aug 7, 2019
• Medium 6.5
  CVE-2019-1003079

  Missing permission check in Jenkins VMware Lab Manager Slaves Plugin

  A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

  Jenkins Project Jenkins VMware Lab Manager Slaves Plugin org.jenkins-ci.plugins:labmanager Web / CMS Maven
  Apr 4, 2019
• Medium 6.5
  CVE-2019-1003078

  Jenkins VMware Lab Manager Slaves Plugin vulnerable CSRF vulnerability

  A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.

  Jenkins Project Jenkins VMware Lab Manager Slaves Plugin org.jenkins-ci.plugins:labmanager Web / CMS Maven
  Apr 4, 2019