Junglewise Threat Intelligence

CVE-2019-16547: Jenkins Google Compute Engine Plugin Missing Authorization vulnerability

CVE-2019-16547 · Severity: low · CVSS 3 · Published 2022-05-24

Technologies: org.jenkins-ci.plugins:google-compute-engine (Maven). Vendors: Maven.

Executive brief

Jenkins Google Compute Engine Plugin Missing Authorization vulnerability

Affected products

Maven org.jenkins-ci.plugins:google-compute-engine

Related threats

Jenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin
Jenkins Google Compute Engine Plugin Cross-Site Request Forgery vulnerability
Private key stored in plain text by Jenkins Google Compute Engine Plugin