Not rated

CVE-2019-1003079 A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection…

Description

A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins VMware Lab Manager Slaves Plugin	Versions not published

The 4 CVEs of Jenkins VMware Lab Manager Slaves Plugin →

CVE-2020-2319 Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier stores a password unencrypted in the global config.xml file… Not rated CVE-2019-10382 Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the… Not rated CVE-2019-1003078 A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the… Not rated

Do you use Jenkins VMware Lab Manager Slaves Plugin?

Track this CVE Watch Jenkins VMware Lab Manager Slaves Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-1003079

Timeline

Published April 4, 2019
Last modified August 5, 2024

References

107790 www.securityfocus.com
[oss-security] 20190413 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
jenkins.io jenkins.io

Track this CVE

CVE-2019-1003079 A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection…

Description

Affected products and versions

Other CVEs of Jenkins VMware Lab Manager Slaves Plugin