Vmware Lab Manager Slaves (Jenkins) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2020-11-04. Vendor: Jenkins.

CVEs of Vmware Lab Manager Slaves

• CVE-2020-2319 - CVSS 6.5 (medium), 2020-11-04: Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier stores a password unencrypted in the global config.xml file on the Jenkins controller where it can…
• CVE-2019-10382 - CVSS 6.5 (medium), 2019-08-07: Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.
• CVE-2019-1003079 - CVSS 6.5 (medium), 2019-04-04: A missing permission check in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows…
• CVE-2019-1003078 - CVSS 6.5 (medium), 2019-04-04: A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation…