Google Compute Engine (Jenkins) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 37 known versions, newest CVE from 2023-11-29. Vendor: Jenkins.

CVEs of Google Compute Engine

• CVE-2023-49652 - CVSS 2.7 (low), 2023-11-29: Incorrect permission checks in Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earlier allow attackers with global Item/Configure permission…
• CVE-2023-49673 - CVSS 8.8 (high), 2023-11-29: A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an…
• CVE-2022-29052 - CVSS 4.3 (medium), 2022-04-12: Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they…
• CVE-2019-16547 - CVSS 4.3 (medium), 2019-11-21: Missing permission checks in various API endpoints in Jenkins Google Compute Engine Plugin 4.1.1 and earlier allow attackers with Overall/Read permission to…
• CVE-2019-16546 - CVSS 5.9 (medium), 2019-11-21: Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle…
• CVE-2019-16548 - CVSS 8.8 (high), 2019-11-21: A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineCloud#doProvision could be used to…