CVE-2019-1003078: CSRF
A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this cross-site request forgery vulnerability?
The vulnerability ID for this cross-site request forgery vulnerability is CVE-2019-1003078.
What is the severity level of CVE-2019-1003078?
CVE-2019-1003078 has a severity level of medium (6.5).
Which software is affected by CVE-2019-1003078?
Jenkins VMware Lab Manager Slaves Plugin, specifically version jenkins:vmware_lab_manager_slaves.
How can an attacker exploit CVE-2019-1003078?
An attacker can exploit CVE-2019-1003078 by initiating a connection to an attacker-specified server using the LabManager.DescriptorImpl#doTestConnection form validation method.
Where can I find more information about CVE-2019-1003078?
You can find more information about CVE-2019-1003078 at the following sources: [1] http://www.securityfocus.com/bid/107790 [2] https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979