CVE-2019-10472

The CVE-2019-10472 involves Jenkins Libvirt Slaves Plugin where a missing permission check allows attackers with Overall/Read to initiate SSH connections to an attacker-controlled server using attacker-controlled credentials IDs, potentially capturing credentials stored in Jenkins. The connected ...

CVE-2019-10471

CVE-2019-10471 is a cross-site request forgery vulnerability in the Jenkins Libvirt Slaves Plugin. The issue allows an attacker to trigger actions that cause the server to connect to an attacker-specified SSH server using credentials IDs chosen by the attacker, potentially exposing credentials st...

CVE-2019-10473

A vulnerability in the Jenkins Libvirt Slaves Plugin (credential enumeration) arises from a missing permission check in form-related methods. Affected component(s): Libvirt Slaves Plugin, form-related credential handling. Root cause: insufficient access control allows users with Overall/Read to e...