Jenkins Google Compute Engine vulnerabilities

6 CVEs affecting Jenkins Google Compute Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49673, published 2023-11-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-16546, published 2019-11-21. Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days. Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks.
CVE-2022-29052, published 2022-04-12. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read…
CVE-2019-16548, published 2019-11-21. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineCloud#doProvision could be used to provision new agents.
CVE-2019-16547, published 2019-11-21. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. Missing permission checks in various API endpoints in Jenkins Google Compute Engine Plugin 4.1.1 and earlier allow attackers with Overall/Read permission to obtain limited information about the…
CVE-2023-49652, published 2023-11-29. Low severity, CVSS 2.7. EPSS: 0.5% chance of exploitation in the next 30 days. Incorrect permission checks in Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earlier allow attackers with global Item/Configure permission (while lacking Item/Configure permission…
CVE-2023-49673, published 2023-11-29. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using…