Improper Authorization in Jenkins vSphere Plugin by CloudBees
CVE-2018-1000152

6.3MEDIUM

Key Information:

Vendor
Jenkins
Status
Vsphere
Vendor
CVE Published:
5 April 2018

Summary

An improper authorization vulnerability in the Jenkins vSphere Plugin allows malicious actors to exploit form validation issues. This vulnerability lets attackers send multiple requests to the connected vSphere server, which could lead to service disruption or unauthorized access to sensitive credentials. Affected users are encouraged to review the security advisory for necessary updates and mitigations.

References

https://jenkins.io/security/advisory/2018-03-26/#SECURITY...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.