Skip to content
Sign in
Not rated

CVE-2019-1003093 A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation…

Description

A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

Affected products and versions

Product Affected versions Fixed in
Jenkins Nomad Plugin Versions not published

Other CVEs of Jenkins Nomad Plugin

The 3 CVEs of Jenkins Nomad Plugin →
CVE-2021-21681 Jenkins Nomad Plugin 0.7.4 and earlier stores Docker passwords unencrypted in the global config.xml file on the… Not rated CVE-2019-1003092 A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection… Not rated
Track this CVE