| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:azure-vm-agents | < 0.8.1 | 0.8.1 |
| azure vm agents | ≤ 0.8.0 |
An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free