Alauda Kubernetes Support

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-16576 Maven MEDIUM This Month

A missing permission check in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Kubernetes Alauda Kubernetes Support

NVD

CVSS 3.1

6.5

EPSS

0.9%

CVE-2019-16575 Maven HIGH This Week

A cross-site request forgery vulnerability in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Jenkins Kubernetes CSRF Alauda Kubernetes Support

NVD

CVSS 3.1

8.8

EPSS

0.9%

CVE-2019-16576 Maven

EPSS 1% CVSS 6.5

MEDIUM This Month

Authentication Bypass Jenkins Kubernetes +1

NVD

CVE-2019-16575 Maven

EPSS 1% CVSS 8.8

HIGH This Week

Jenkins Kubernetes CSRF +1

NVD