Vendor/product archive

jenkins / vsphere CVEs

Beta · best-effort

3 CVEs tagged to jenkins / vsphere — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to jenkins vendor archive

CVE-2018-1000153

Published Apr 5, 2018

A cross-site request forgery vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, De…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2018-1000152

Published Apr 5, 2018

An improper authorization vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delet…

CVSS 6.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-1000151

Published Apr 5, 2018

A man in the middle vulnerability exists in Jenkins vSphere Plugin 2.16 and older in VSphere.java that disables SSL/TLS certificate validation by default.

CVSS 5.6 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1