CVE-2019-1003079

A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpldoTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

CVE-2019-1003079

CVE-2019-1003079 affects the Jenkins VMware Lab Manager Slaves Plugin. The root cause is a missing permission check in LabManager.DescriptorImpl#doTestConnection form validation, enabling attackers with Overall/Read permission to initiate a connection to an attacker-specified server. Fields affec...