GCVE - cpe:2.3:a:jenkins:libvirt_slaves:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:libvirt_slaves:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Libvirt Slaves (`ffb88d90-f2ca-53ed-8daa-45f124699a81`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-10473`	vulnerable	2026-06-08 05:12:23.384251	Details available A missing permission check in Jenkins Libvirt Slaves Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins. Published: 2019-10-23T12:45:44.000Z Updated: 2024-08-04T22:24:18.418Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1014%20%282%29 http://www.openwall.com/lists/oss-security/2019/10/23/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10472`	vulnerable	2026-06-08 05:12:23.383801	Details available A missing permission check in Jenkins Libvirt Slaves Plugin allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Published: 2019-10-23T12:45:44.000Z Updated: 2024-08-04T22:24:18.621Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1014%20%281%29 http://www.openwall.com/lists/oss-security/2019/10/23/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10471`	vulnerable	2026-06-08 05:12:23.383371	Details available A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Published: 2019-10-23T12:45:43.000Z Updated: 2024-08-04T22:24:18.573Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2019-10-23/#SECURITY-1014%20%281%29 http://www.openwall.com/lists/oss-security/2019/10/23/2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.