Vulnerability Details CVE-2019-1003093
A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.6%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
Products affected by CVE-2019-1003093
-
cpe:2.3:a:jenkins:nomad:-
-
cpe:2.3:a:jenkins:nomad:0.1
-
cpe:2.3:a:jenkins:nomad:0.2
-
cpe:2.3:a:jenkins:nomad:0.3
-
cpe:2.3:a:jenkins:nomad:0.3.1
-
cpe:2.3:a:jenkins:nomad:0.4