Jenkins

Azure Vm Agents

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2023-32990

  • EPSS 0.12%
  • Published 16.05.2023 17:15:11
  • Last modified 23.01.2025 21:15:14

A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through...

4.3

CVE-2023-32988

  • EPSS 0.18%
  • Published 16.05.2023 16:15:11
  • Last modified 23.01.2025 21:15:13

A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

8.8

CVE-2023-32989

  • EPSS 0.22%
  • Published 16.05.2023 16:15:11
  • Last modified 23.01.2025 21:15:13

A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through anoth...

4.3

CVE-2019-1003035

  • EPSS 0.03%
  • Published 08.03.2019 21:29:00
  • Last modified 21.11.2024 04:17:46

An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers...

4.3

CVE-2019-1003036

  • EPSS 0.03%
  • Published 08.03.2019 21:29:00
  • Last modified 21.11.2024 04:17:47

A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgent.java that allows attackers with Overall/Read permission to attach a public IP address to an Azure V...

6.5

CVE-2019-1003037

  • EPSS 0.05%
  • Published 08.03.2019 21:29:00
  • Last modified 21.11.2024 04:17:47

An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to enumerate credentials IDs of credent...