Jenkins Nomad Plugin missing permission check

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2019-1003093 · ADVISORY
• jenkinsci/nomad-plugin commit 93ea215 · WEB
• jenkinsci/nomad-plugin · WEB
• jenkinsci/nomad-plugin release v0.6.3 · WEB
• jenkins.io/security/advisory/2019-04-03 · WEB
• openwall.com/lists/oss-security/2019/04/12/2 · WEB
• securityfocus.com/bid/107790 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:nomad

• CVE-2021-21681TRUNG BÌNH 5.5Jenkins Nomad Plugin 0.7.4 and earlier stores Docker passwords unencrypted in the global config.xml file on the Jenkins controller where the…
• CVE-2019-1003092TRUNG BÌNH 6.5A cross-site request forgery vulnerability in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method …