Junglewise Threat Intelligence

CVE-2019-16548: Jenkins Google Compute Engine Plugin Cross-Site Request Forgery vulnerability

CVE-2019-16548 · Severity: low · CVSS 3 · Published 2022-05-24

Technologies: org.jenkins-ci.plugins:google-compute-engine (Maven). Vendors: Maven.

Executive brief

Jenkins Google Compute Engine Plugin Cross-Site Request Forgery vulnerability

Affected products

Maven org.jenkins-ci.plugins:google-compute-engine

Related threats

Jenkins Google Compute Engine Plugin Missing Authorization vulnerability
Jenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin
Private key stored in plain text by Jenkins Google Compute Engine Plugin