org.jenkins-ci.plugins:libvirt-slave

4 results · Feed

• High 8.8
  CVE-2021-21627

  CSRF vulnerability in Jenkins Libvirt Agents Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains.

  Jenkins Project Jenkins Libvirt Agents Plugin org.jenkins-ci.plugins:libvirt-slave Web / CMS Maven
  Mar 18, 2021
• Medium 4.3
  CVE-2019-10473

  Jenkins Libvirt Slaves Plugin vlnerable to Credential Enumeration

  A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

  Jenkins Project Jenkins Libvirt Slaves Plugin org.jenkins-ci.plugins:libvirt-slave Web / CMS Maven
  Oct 23, 2019
• Medium 6.5
  CVE-2019-10472

  Jenkins Libvirt Slaves Plugin vlnerable to Incorrect Default Permissions

  A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in …

  Jenkins Project Jenkins Libvirt Slaves Plugin org.jenkins-ci.plugins:libvirt-slave Web / CMS Maven
  Oct 23, 2019
• High 8.8
  CVE-2019-10471

  Jenkins Libvirt Slaves Plugin vlnerable to Cross-Site Request Forgery

  A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

  Jenkins Project Jenkins Libvirt Slaves Plugin org.jenkins-ci.plugins:libvirt-slave Web / CMS Maven
  Oct 23, 2019