Vendor/product archive

jenkins / vmware_lab_manager_slaves CVEs

Beta · best-effort

4 CVEs tagged to jenkins / vmware_lab_manager_slaves — 0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to jenkins vendor archive

CVE-2020-2319

Published Nov 4, 2020

Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier stores a password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users wi…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-10382

Published Aug 7, 2019

Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-1003079

Published Apr 4, 2019

A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-1003078

Published Apr 4, 2019

A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers to…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1