CVE-2019-10471: CSRF
A cross-site request forgery vulnerability in Jenkins Libvirt Slaves Plugin allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10471?
CVE-2019-10471 is considered a medium severity vulnerability due to the risk of credential exposure.
How do I fix CVE-2019-10471?
To fix CVE-2019-10471, update the Jenkins Libvirt Slaves Plugin to version 1.8.6 or later.
What types of attacks can exploit CVE-2019-10471?
CVE-2019-10471 can be exploited through cross-site request forgery attacks that target Jenkins credentials.
Which versions of Jenkins Libvirt Slaves are affected by CVE-2019-10471?
Versions of Jenkins Libvirt Slaves prior to 1.8.6 are affected by CVE-2019-10471.
What is the impact of CVE-2019-10471 on Jenkins users?
CVE-2019-10471 allows attackers to connect to SSH servers using credentials stored in Jenkins, potentially compromising sensitive information.