CVE-2018-1000152

An improper authorization vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delete.java, DeleteSnapshot.java, Deploy.java, ExposeGuestInfo.java, FolderVSphereCloudProperty.java, PowerOff.java,...

org.jenkins-ci.plugins:job-dsl (>=1.25, <=1.32) potentially affected by CVE-2018-1000152 via org.jenkins-ci.plugins:vsphere-cloud (1.1.11)

org.jenkins-ci.plugins:vsphere-cloud MAVEN version 1.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:vsphere-cloud and may be impacted: - org.jenkins-ci.plugins:job-dsl =1.25, =1.32 Source cves: CVE-2018-1000152 Source...