Executive brief
Missing permission check in Azure VM Agents Plugin allowed modifying VM configuration
Affected products
- Maven org.jenkins-ci.plugins:azure-vm-agents
Junglewise Threat Intelligence
CVE-2019-1003036: Missing permission check in Azure VM Agents Plugin allowed modifying VM configuration
CVE-2019-1003036 · Severity: low · CVSS 3.1 · Published 2022-05-13
Technologies: org.jenkins-ci.plugins:azure-vm-agents (Maven). Vendors: Maven.
Related threats
- Jenkins Azure VM Agents Plugin missing permission checks
- Jenkins Azure VM Agents Plugin Cross-site Request Forgery vulnerability
- Jenkins Azure VM Agents Plugin missing permission checks
- Unprivileged users with Overall/Read access are able to enumerate credential IDs in Azure VM Agents Plugin
- Information disclosure in Azure VM Agents Plugin