Lucene search

K
JenkinsAzure Vm Agents

6 matches found

CVE
CVE
added 2023/05/16 4:15 p.m.55 views

CVE-2023-32989

A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method.

8.8CVSS8.6AI score0.00292EPSS
CVE
CVE
added 2023/05/16 4:15 p.m.52 views

CVE-2023-32988

A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

4.3CVSS4.3AI score0.00176EPSS
CVE
CVE
added 2023/05/16 5:15 p.m.51 views

CVE-2023-32990

A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method.

6.5CVSS6.2AI score0.00124EPSS
CVE
CVE
added 2019/03/08 9:29 p.m.45 views

CVE-2019-1003037

An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

6.5CVSS6.2AI score0.00045EPSS
CVE
CVE
added 2019/03/08 9:29 p.m.42 views

CVE-2019-1003035

An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'ver...

4.3CVSS4.3AI score0.00027EPSS
CVE
CVE
added 2019/03/08 9:29 p.m.39 views

CVE-2019-1003036

A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgent.java that allows attackers with Overall/Read permission to attach a public IP address to an Azure VM agent.

4.3CVSS4.4AI score0.0003EPSS