Executive brief
Jenkins Azure VM Agents Plugin Cross-site Request Forgery vulnerability
Affected products
- Maven org.jenkins-ci.plugins:azure-vm-agents
Junglewise Threat Intelligence
CVE-2023-32989: Jenkins Azure VM Agents Plugin Cross-site Request Forgery vulnerability
CVE-2023-32989 · Severity: low · CVSS 3.1 · Published 2023-05-16
Technologies: org.jenkins-ci.plugins:azure-vm-agents (Maven). Vendors: Maven.
Related threats
- Jenkins Azure VM Agents Plugin missing permission checks
- Jenkins Azure VM Agents Plugin missing permission checks
- Missing permission check in Azure VM Agents Plugin allowed modifying VM configuration
- Unprivileged users with Overall/Read access are able to enumerate credential IDs in Azure VM Agents Plugin
- Information disclosure in Azure VM Agents Plugin