CVE-2019-1003035

An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in…

published March 8, 2019

CVSS
—
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01008 · 62.7th percentile
Published
2019-03-08T21:00Z
EPSS history
Timeline
  • 08 MAR 21:00Z
    An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in…
    cvelistv5