Cross-site request forgery vulnerability in Jenkins Nomad Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2019-1003092 · ADVISORY
• jenkinsci/nomad-plugin commit 3331d24 · WEB
• jenkinsci/nomad-plugin · PACKAGE
• jenkins.io/security/advisory/2019-04-03 · WEB
• openwall.com/lists/oss-security/2019/04/12/2 · WEB
• securityfocus.com/bid/107790 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:nomad

• CVE-2021-21681TRUNG BÌNH 5.5Jenkins Nomad Plugin 0.7.4 and earlier stores Docker passwords unencrypted in the global config.xml file on the Jenkins controller where the…
• CVE-2019-1003093TRUNG BÌNH 6.5A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackers…