What is the severity of CVE-2018-1000152?

CVE-2018-1000152 is classified as a medium severity vulnerability.

How do I fix CVE-2018-1000152?

To fix CVE-2018-1000152, update the Jenkins vSphere Plugin to version 2.17 or later.

What software is affected by CVE-2018-1000152?

CVE-2018-1000152 affects the Jenkins vSphere Plugin version 2.16 and older.

What type of vulnerability is CVE-2018-1000152?

CVE-2018-1000152 is an improper authorization vulnerability.

What components of Jenkins are impacted by CVE-2018-1000152?

CVE-2018-1000152 impacts several components, including Clone.java, Deploy.java, and PowerOn.java.

Vulnerability/
CVE-2018-1000152

medium

6.5

CWE

863

5/4/2018

16/9/2024

CVE-2018-1000152

First published: Thu Apr 05 2018(Updated: )

An improper authorization vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delete.java, DeleteSnapshot.java, Deploy.java, ExposeGuestInfo.java, FolderVSphereCloudProperty.java, PowerOff.java, PowerOn.java, Reconfigure.java, Rename.java, RenameSnapshot.java, RevertToSnapshot.java, SuspendVm.java, TakeSnapshot.java, VSphereBuildStepContainer.java, vSphereCloudProvisionedSlave.java, vSphereCloudSlave.java, vSphereCloudSlaveTemplate.java, VSphereConnectionConfig.java, vSphereStep.java that allows attackers to perform form validation related actions, including sending numerous requests to the configured vSphere server, potentially resulting in denial of service, or send credentials stored in Jenkins with known ID to an attacker-specified server ("test connection").

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Jenkins Vsphere	<=2.16

Never miss a vulnerability like this again

Reference Links

https://jenkins.io/security/advisory/2018-03-26/#SECURITY-745

Frequently Asked Questions

What is the severity of CVE-2018-1000152?
CVE-2018-1000152 is classified as a medium severity vulnerability.
How do I fix CVE-2018-1000152?
To fix CVE-2018-1000152, update the Jenkins vSphere Plugin to version 2.17 or later.
What software is affected by CVE-2018-1000152?
CVE-2018-1000152 affects the Jenkins vSphere Plugin version 2.16 and older.
What type of vulnerability is CVE-2018-1000152?
CVE-2018-1000152 is an improper authorization vulnerability.
What components of Jenkins are impacted by CVE-2018-1000152?
CVE-2018-1000152 impacts several components, including Clone.java, Deploy.java, and PowerOn.java.

collector/nvd-index
agent/type
agent/softwarecombine
agent/severity
agent/references
agent/tags
agent/author
agent/weakness
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
vendor/jenkins
canonical/jenkins vsphere
version/jenkins vsphere/2.16

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.