Executive brief
Unprivileged users with Overall/Read access are able to enumerate credential IDs in Azure VM Agents Plugin
Affected products
- Maven org.jenkins-ci.plugins:azure-vm-agents
Junglewise Threat Intelligence
CVE-2019-1003037: Unprivileged users with Overall/Read access are able to enumerate credential IDs in Azure VM Agents Plugin
CVE-2019-1003037 · Severity: low · CVSS 3.1 · Published 2022-05-13
Technologies: org.jenkins-ci.plugins:azure-vm-agents (Maven). Vendors: Maven.
Related threats
- Jenkins Azure VM Agents Plugin missing permission checks
- Jenkins Azure VM Agents Plugin Cross-site Request Forgery vulnerability
- Jenkins Azure VM Agents Plugin missing permission checks
- Missing permission check in Azure VM Agents Plugin allowed modifying VM configuration
- Information disclosure in Azure VM Agents Plugin