Alauda Kubernetes Support

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-16576 Dec 17, 15:15 Maven MEDIUM This Month

A missing permission check in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Kubernetes Jenkins Alauda Kubernetes Support

NVD

CVSS 3.1

6.5

EPSS

0.9%

CVE-2019-16575 Dec 17, 15:15 Maven HIGH This Week

A cross-site request forgery vulnerability in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Kubernetes CSRF Jenkins Alauda Kubernetes Support

NVD

CVSS 3.1

8.8

EPSS

0.9%

CVE-2019-16576 Maven

EPSS 1% CVSS 6.5

MEDIUM This Month

Authentication Bypass Kubernetes Jenkins +1

NVD

CVE-2019-16575 Maven

EPSS 1% CVSS 8.8

HIGH This Week

Kubernetes CSRF Jenkins +1

NVD