Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-1003093

A missing permission check in Jenkins Nomad Plugin in the NomadCloud.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.6%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
Products affected by CVE-2019-1003093
  • Jenkins » Nomad » Version: N/A
    cpe:2.3:a:jenkins:nomad:-
  • Jenkins » Nomad » Version: 0.1
    cpe:2.3:a:jenkins:nomad:0.1
  • Jenkins » Nomad » Version: 0.2
    cpe:2.3:a:jenkins:nomad:0.2
  • Jenkins » Nomad » Version: 0.3
    cpe:2.3:a:jenkins:nomad:0.3
  • Jenkins » Nomad » Version: 0.3.1
    cpe:2.3:a:jenkins:nomad:0.3.1
  • Jenkins » Nomad » Version: 0.4
    cpe:2.3:a:jenkins:nomad:0.4


Contact Us

Shodan ® - All rights reserved