Not rated

CVE-2019-10471 A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an…

Description

A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Libvirt Slaves Plugin	Versions not published

References

jenkins.io jenkins.io
[oss-security] 20191023 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Timeline

Published October 23, 2019
Last modified August 4, 2024

The 3 CVEs of Jenkins Libvirt Slaves Plugin →

CVE-2019-10472 A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect… Not rated CVE-2019-10473 A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read… Not rated

Track this CVE

CVE-2019-10471 A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an…

Description

Affected products and versions

References

Timeline

Other CVEs of Jenkins Libvirt Slaves Plugin