Jenkins Azure VM Agents Plugin missing permission checks

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-32988 · ADVISORY
• jenkins.io/security/advisory/2023-05-16 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:azure-vm-agents

• CVE-2023-32990TRUNG BÌNH 6.5A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to…
• CVE-2023-32989CAO 8.8A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers to conne…
• CVE-2019-1003037TRUNG BÌNH 6.5An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagen…
• CVE-2019-1003036TRUNG BÌNH 4.3A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/Az…
• CVE-2019-1003035TRUNG BÌNH 4.3An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagen…