jenkins openstack cloud vulnerabilities

Latest jenkins openstack cloud CVEs

Newest publication first

1. CVE-2018-1000603 CSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials

   Published 2018-06-26

   High·CVSS 8.8

   A exposure of sensitive information vulnerability exists in Jenkins Openstack Cloud Plugin 2.35 and earlier in BootSource.java, InstancesToRun.java, JCloudsCleanupThread.java, JCloudsCloud.java, JCloudsComputer.java, JCloudsPreCreationThread.java, JCloudsRetentionStrategy.java, J...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.