cve.bz

CVE-2019-1003035

4.3 mediumEPSS 1.0%

Medium (4.3) in jenkins azure vm agents. EPSS 1.0% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:azure-vm-agents 0.8.1.

An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.

Severity

CVSS 3.1

4.3 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE
CWE-862
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-3hg6-c7f8-3348Mavenorg.jenkins-ci.plugins:azure-vm-agents<0.8.10.8.1

References

Check your stackJSON