Not rated

CVE-2019-1003092 A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection…

Description

A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Nomad Plugin	Versions not published

References

107790 www.securityfocus.com
[oss-security] 20190413 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
jenkins.io jenkins.io

Timeline

Published April 4, 2019
Last modified August 5, 2024

The 3 CVEs of Jenkins Nomad Plugin →

CVE-2021-21681 Jenkins Nomad Plugin 0.7.4 and earlier stores Docker passwords unencrypted in the global config.xml file on the… Not rated CVE-2019-1003093 A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation… Not rated

Track this CVE

CVE-2019-1003092 A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection…

Description

Affected products and versions

References

Timeline

Other CVEs of Jenkins Nomad Plugin