org.jenkins-ci.plugins:libvirt-slave

2 results · Clear filters · Feed

• Medium 4.3
  CVE-2019-10473

  Jenkins Libvirt Slaves Plugin vlnerable to Credential Enumeration

  A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

  Jenkins Project Jenkins Libvirt Slaves Plugin org.jenkins-ci.plugins:libvirt-slave Web / CMS Maven
  Oct 23, 2019
• Medium 6.5
  CVE-2019-10472

  Jenkins Libvirt Slaves Plugin vlnerable to Incorrect Default Permissions

  A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in …

  Jenkins Project Jenkins Libvirt Slaves Plugin org.jenkins-ci.plugins:libvirt-slave Web / CMS Maven
  Oct 23, 2019