En resumen
- CVE-2019-1003035 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a org.jenkins-ci.plugins:azure-vm-agents, azure vm agents (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.0%, mayor que el 63.1% de las vulnerabilidades.
- Solución: actualizar a 0.8.1 o posterior.
Description
An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.
NVD description
An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.
Más vulnerabilidades de org.jenkins-ci.plugins:azure-vm-agents
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free