Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Jenkins Azure VM Agents Plugin — Jenkins Security Advisory 2023-05-16 Clear all filters
TI-2023-16178 CVE-2023-32990 · GHSA-rv6g-3v76-cvf9

Incorrect permission assignment in Jenkins Azure VM Agents Plugin

Priority LOW 30

A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified Azure Cloud server using attacker-specified cr…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00578 Published 2023-05-16 Fixed in 853.v4a CWE-732
TI-2023-16177 CVE-2023-32989 · GHSA-26j3-4m55-j6r7

Cross-site request forgery in Jenkins Azure VM Agents Plugin

Priority MEDIUM 40

A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers to connect to an attacker-specified Azure Cloud server using attacker-specified credenti…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0045 Published 2023-05-16 Fixed in 853.v4a CWE-352
TI-2023-16176 CVE-2023-32988 · GHSA-q77x-cxrq-988j

Insufficiently protected credentials in Jenkins Azure VM Agents Plugin

Priority LOW 21

A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00503 Published 2023-05-16 Fixed in 853.v4a CWE-522