En bref
- CVE-2019-1003035 est une vulnérabilité MOYENNE (CVSS 4.3) touchant org.jenkins-ci.plugins:azure-vm-agents, azure vm agents (jenkins).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.0%, plus élevée que 63.2% des vulnérabilités.
- Correctif : mettre à jour vers 0.8.1 ou plus récent.
Description
An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.
NVD description
An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.
Autres vulnérabilités de org.jenkins-ci.plugins:azure-vm-agents
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free