Not rated

CVE-2019-10472 A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect…

Description

A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Libvirt Slaves Plugin	Versions not published

The 3 CVEs of Jenkins Libvirt Slaves Plugin →

CVE-2019-10473 A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read… Not rated CVE-2019-10471 A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an… Not rated

Do you use Jenkins Libvirt Slaves Plugin?

Track this CVE Watch Jenkins Libvirt Slaves Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10472

Timeline

Published October 23, 2019
Last modified August 4, 2024

References

jenkins.io jenkins.io
[oss-security] 20191023 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE

CVE-2019-10472 A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect…

Description

Affected products and versions

Other CVEs of Jenkins Libvirt Slaves Plugin