Jenkins Project Jenkins Azure VM Agents Plugin vulnerabilities
6 vulnerabilities
Known vulnerabilities in Jenkins Project Jenkins Azure VM Agents Plugin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-1003037jenkins projectjenkins azure vm agents plugin+2
EPSS score1.28%
An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.CVE-2019-1003036jenkins projectjenkins azure vm agents plugin+2EPSS score0.91%
A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgent.java that allows attackers with Overall/Read permission to attach a public IP address to an Azure VM agent.CVE-2019-1003035jenkins projectjenkins azure vm agents plugin+2EPSS score1.01%
An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.CVE-2023-32990jenkins projectjenkins azure vm agents plugin+2EPSS score0.58%
A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method.CVE-2023-32989jenkins projectjenkins azure vm agents plugin+2EPSS score0.45%
A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method.CVE-2023-32988jenkins projectjenkins azure vm agents plugin+2EPSS score0.50%
A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.