Product · Jenkins Project

Jenkins JClouds Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.2

CVE-2019-10369

Jenkins JClouds Plugin missing permission check

A missing permission check in Jenkins JClouds Plugin 2.14 and earlier in BlobStoreProfile.DescriptorImpl#doTestConnection and JCloudsCloud.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using att…

Jenkins Project Jenkins JClouds Plugin org.jenkins-ci.plugins:jclouds-jenkins Web / CMS Maven

Aug 7, 2019
Medium 4.2

CVE-2019-10368

Jenkins JClouds Plugin cross-site request forgery vulnerability

A cross-site request forgery vulnerability in Jenkins JClouds Plugin 2.14 and earlier in BlobStoreProfile.DescriptorImpl#doTestConnection and JCloudsCloud.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specifi…

Jenkins Project Jenkins JClouds Plugin org.jenkins-ci.plugins:jclouds-jenkins Web / CMS Maven

Aug 7, 2019