In short
- CVE-2019-1003035 is a MEDIUM (CVSS 4.3) vulnerability affecting org.jenkins-ci.plugins:azure-vm-agents, azure vm agents (jenkins).
- Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.1% of all vulnerabilities.
- Fix: update to 0.8.1 or later.
Description
An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.
NVD description
An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.
More vulnerabilities in org.jenkins-ci.plugins:azure-vm-agents
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free