Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins:vsphere-cloud

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.6
    CVE-2018-1000151

    Jenkins vSphere Plugin disables SSL/TLS certificate validation by default

    A man in the middle vulnerability exists in Jenkins vSphere Plugin 2.16 and older in VSphere.java that disables SSL/TLS certificate validation by default.

    org.jenkins-ci.plugins:vsphere-cloud Maven
  • Medium 6.3
    CVE-2018-1000152

    Jenkins vSphere Plugin incorrect authorization vulnerability

    An improper authorization vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delete.java, DeleteSnapshot.java, Deploy.java, ExposeGuestInfo.java, FolderVSphereClo…

    org.jenkins-ci.plugins:vsphere-cloud Maven