Jenkins Libvirt Slaves Plugin vlnerable to Incorrect Default Permissions

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2019-10472 · ADVISORY
• jenkinsci/libvirt-slave-plugin commit 231c41e · WEB
• jenkinsci/libvirt-slave-plugin commit c671d68 · WEB
• jenkinsci/libvirt-slave-plugin · PACKAGE
• jenkins.io/security/advisory/2019-10-23 · WEB
• openwall.com/lists/oss-security/2019/10/23/2 · WEB
• jenkins.io/security/advisory/2019-10-23

Lỗ hổng khác của org.jenkins-ci.plugins:libvirt-slave

• CVE-2021-21627CAO 8.8A cross-site request forgery (CSRF) vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor dom…
• CVE-2019-10473TRUNG BÌNH 4.3A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read access to enumerate cred…
• CVE-2019-10471CAO 8.8A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an attacker-specified SSH server …