Vsphere (Jenkins) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 45 known versions, newest CVE from 2018-04-05. Vendor: Jenkins.

CVEs of Vsphere

• CVE-2018-1000152 - CVSS 6.3 (medium), 2018-04-05: An improper authorization vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java,…
• CVE-2018-1000151 - CVSS 5.6 (medium), 2018-04-05: A man in the middle vulnerability exists in Jenkins vSphere Plugin 2.16 and older in VSphere.java that disables SSL/TLS certificate validation by default.
• CVE-2018-1000153 - CVSS 8.8 (high), 2018-04-05: A cross-site request forgery vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java,…