Em resumo
- CVE-2019-1003035 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta org.jenkins-ci.plugins:azure-vm-agents, azure vm agents (jenkins).
- Chance de exploração nos próximos 30 dias (EPSS): 1.0%, maior que 63.1% das vulnerabilidades.
- Correção: atualize para 0.8.1 ou posterior.
Description
An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.
NVD description
An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.
Mais vulnerabilidades de org.jenkins-ci.plugins:azure-vm-agents
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free