Lucene search

K
osvGoogleOSV:GHSA-56FF-M6PV-8594
HistoryMay 13, 2022 - 1:25 a.m.

Missing permission check in Jenkins VMware Lab Manager Slaves Plugin

2022-05-1301:25:16
Google
osv.dev
1

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.1%

Related for OSV:GHSA-56FF-M6PV-8594