Design/Logic Flaw

2019-03-0821:29:00

PRIOn knowledge base

www.prio-n.com

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.8%

JSON

A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgent.java that allows attackers with Overall/Read permission to attach a public IP address to an Azure VM agent.

CPENameOperatorVersion
azure_vm_agentsle0.8.0

CPE	Name	Operator	Version
	azure_vm_agents	le	0.8.0

References

www.securityfocus.com/bid/107476

jenkins.io/security/advisory/2019-03-06/