deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-9633
Published: 2019-03-08
Description: gio/gsocketclient.c in GNOME GLib 2.59.2 does not ensure that a parent GTask remains alive during the execution of a connection-attempting enumeration, which allows remote attackers to cause a denial of service (g_socket_client_connected_callback mishandling and application crash) via a crafted web site, as demonstrated by GNOME Web (aka Epiphany).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-754
References: http://www.securityfocus.com/bid/107391; https://gitlab.gnome.org/GNOME/glib/issues/1649; http://www.securityfocus.com/bid/107391
CVE: CVE-2019-9634
Published: 2019-03-08
Description: Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://www.openwall.com/lists/oss-security/2019/04/09/1; http://www.securityfocus.com/bid/107450; https://github.com/golang/go/issues/30642
CVE: CVE-2019-3779
Published: 2019-03-08
Description: Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA (Certificate Authority) to sign and trust certs for ETCD as used by the Kubernetes API. This could allow a user authenticated with a cluster to request a signed certificate leveraging the Kubernetes CSR capability to obtain a credential that could escalate privilege access to ETCD.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284, CWE-264
References: https://www.cloudfoundry.org/blog/cve-2019-3779; https://www.cloudfoundry.org/blog/cve-2019-3779
CVE: CVE-2019-3780
Published: 2019-03-08
Description: Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate privileges to gain access to the IAAS account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-260, CWE-522
References: http://www.securityfocus.com/bid/107434; https://www.cloudfoundry.org/blog/cve-2019-3780; http://www.securityfocus.com/bid/107434
CVE: CVE-2018-20234
Published: 2019-03-08
Description: There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 before version 3.1.1 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-88
References: http://packetstormsecurity.com/files/152173/Sourcetree-Git-Arbitrary-Code-Execution-URL-Handling.html; http://www.securityfocus.com/bid/107414; https://jira.atlassian.com/browse/SRCTREE-6391
CVE: CVE-2018-20235
Published: 2019-03-08
Description: There was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0.5a before version 3.0.15 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.
CVSS Score: 8.8 (HIGH)
References: http://packetstormsecurity.com/files/152173/Sourcetree-Git-Arbitrary-Code-Execution-URL-Handling.html; http://www.securityfocus.com/bid/107407; https://jira.atlassian.com/browse/SRCTREEWIN-11289
CVE: CVE-2018-20236
Published: 2019-03-08
Description: There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://packetstormsecurity.com/files/152173/Sourcetree-Git-Arbitrary-Code-Execution-URL-Handling.html; http://www.securityfocus.com/bid/107401; https://jira.atlassian.com/browse/SRCTREEWIN-11291
CVE: CVE-2019-1601
Published: 2019-03-08
Description: A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to gain read and write access to a critical configuration file. The vulnerability is due to a failure to impose strict filesystem permissions on the targeted device. An attacker could exploit this vulnerability by accessing and modifying restricted files. A successful exploit could allow an attacker to use the content of this configuration file to bypass authentication and log in as any user of the device. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(25), 8.1(1b), and 8.3(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(10) and 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.1(5)N1(1b) and 7.3(3)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
CVSS Score: 7.8 (HIGH)
CWE: CWE-284, CWE-732
References: http://www.securityfocus.com/bid/107404; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-file-access; http://www.securityfocus.com/bid/107404
CVE: CVE-2018-20187
Published: 2019-03-08
Description: A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely measuring the time taken for ECC key generation may be able to derive information about the high bits of the secret key, as the function to derive the public point from the secret scalar uses an unblinded Montgomery ladder whose loop iteration count depends on the bitlength of the secret. This issue affects only key generation, not ECDSA signatures or ECDH key agreement.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-320
References: https://botan.randombit.net/news.html; https://botan.randombit.net/security.html; https://github.com/crocs-muni/ECTester
CVE: CVE-2019-1602
Published: 2019-03-08
Description: A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator. The vulnerability is due to improper implementation of filesystem permissions. An attacker could exploit this vulnerability by logging in to the CLI of an affected device, accessing a specific file, and leveraging this information to authenticate to the NX-API server. A successful exploit could allow an attacker to make configuration changes as administrator. Note: NX-API is disabled by default. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/107332; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-escalation; http://www.securityfocus.com/bid/107332
CVE: CVE-2019-1603
Published: 2019-03-08
Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to escalate lower-level privileges to the administrator level. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow an attacker to make configuration changes to the system as administrator. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
CVSS Score: 7.8 (HIGH)
CWE: CWE-285, CWE-863
References: http://www.securityfocus.com/bid/107328; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-privesc; http://www.securityfocus.com/bid/107328
CVE: CVE-2019-1604
Published: 2019-03-08
Description: A vulnerability in the user account management interface of Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to an incorrect authorization check of user accounts and their associated Group ID (GID). An attacker could exploit this vulnerability by taking advantage of a logic error that will permit the use of higher privileged commands than what is necessarily assigned. A successful exploit could allow an attacker to execute commands with elevated privileges on the underlying Linux shell of an affected device. Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 8.2(3), and 8.3(2). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
CVSS Score: 7.8 (HIGH)
CWE: CWE-285, CWE-863
References: http://www.securityfocus.com/bid/107323; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-privesca; http://www.securityfocus.com/bid/107323
CVE: CVE-2019-9627
Published: 2019-03-08
Description: A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions prior to 10.7 allows an attacker (without Administrator privileges) to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/107387; http://www.securityfocus.com/bid/107852; https://www.nccgroup.trust/us/our-research/technical-advisory-cyberark-epm-non-paged-pool-buffer-overflow/
CVE: CVE-2018-4054
Published: 2019-03-08
Description: A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine to successfully exploit this flaw.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0728; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0728
CVE: CVE-2018-4055
Published: 2019-03-08
Description: A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successfully exploit this flaw.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0729; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0729
CVE: CVE-2019-1605
Published: 2019-03-08
Description: A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to incorrect input validation in the NX-API feature. An attacker could exploit this vulnerability by sending a crafted HTTP or HTTPS request to an internal service on an affected device that has the NX-API feature enabled. A successful exploit could allow the attacker to cause a buffer overflow and execute arbitrary code as root. Note: The NX-API feature is disabled by default. MDS 9000 Series Multilayer Switches are affected in versions prior to 8.1(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(8) and 7.0(3)I7(1). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(8). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.3(2)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 7.3(3)D1(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I4(8) and 7.0(3)I7(1). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-119
References: http://www.securityfocus.com/bid/107313; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-api-ex; http://www.securityfocus.com/bid/107313
CVE: CVE-2019-1606
Published: 2019-03-08
Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid user credentials to exploit this vulnerability. Nexus 3000, 3500, and Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(4).
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-88
References: http://www.securityfocus.com/bid/107345; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-cmdinj-1606; http://www.securityfocus.com/bid/107345
CVE: CVE-2019-1607
Published: 2019-03-08
Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3).
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-77, CWE-88
References: http://www.securityfocus.com/bid/107393; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-cmdinj-1607; http://www.securityfocus.com/bid/107393
CVE: CVE-2019-1608
Published: 2019-03-08
Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(27), 8.1(1b), and 8.3(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3).
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-77, CWE-88
References: http://www.securityfocus.com/bid/107386; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-cmdinj-1608; http://www.securityfocus.com/bid/107386
CVE: CVE-2019-1609
Published: 2019-03-08
Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(27), 8.1(1b), and 8.3(2). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(6). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(6). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), 8.2(3), and 8.3(2). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I4(9) and7.0(3)I7(6). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-77, CWE-88
References: http://www.securityfocus.com/bid/107341; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-cmdinj-1609; http://www.securityfocus.com/bid/107341
CVE: CVE-2019-5015
Published: 2019-03-08
Description: A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine for a successful exploit.
CVSS Score: 7.8 (HIGH)
CWE: CWE-749
References: http://www.securityfocus.com/bid/107436; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0773; http://www.securityfocus.com/bid/107436
CVE: CVE-2017-3164
Published: 2019-03-08
Description: Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: http://mail-archives.apache.org/mod_mbox/www-announce/201902.mbox/%3CCAECwjAVjBN%3DwO5rYs6ktAX-5%3D-f5JDFwbbTSM2TTjEbGO5jKKA%40mail.gmail.com%3E; http://www.securityfocus.com/bid/107026; https://lists.apache.org/thread.html/[PII_REDACTED]4ada1ac658ccf7bc939378c13e492fd6538416ce65df39%40%3Cdev.lucene.apache.org%3E
CVE: CVE-2[PII_REDACTED]
Published: 2019-03-08
Description: A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM.
CVSS Score: 9.9 (CRITICAL)
References: http://packetstormsecurity.com/files/166778/Jenkins-Remote-Code-Execution.html; http://www.securityfocus.com/bid/107476; https://access.redhat.com/errata/RHSA-2019:0739
CVE: CVE-2[PII_REDACTED]
Published: 2019-03-08
Description: A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the Jenkins master JVM.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-693
References: http://packetstormsecurity.com/files/159603/Jenkins-2.63-Sandbox-Bypass.html; http://www.securityfocus.com/bid/107476; https://access.redhat.com/errata/RHSA-2019:0739
CVE: CVE-2[PII_REDACTED]
Published: 2019-03-08
Description: A sandbox bypass vulnerability exists in Jenkins Matrix Project Plugin 1.13 and earlier in pom.xml, src/main/java/hudson/matrix/FilterScript.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM.
CVSS Score: 9.9 (CRITICAL)
References: http://www.securityfocus.com/bid/107476; https://access.redhat.com/errata/RHSA-2019:0739; https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1339
CVE: CVE-2[PII_REDACTED]
Published: 2019-03-08
Description: A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml, src/main/java/hudson/plugins/emailext/ExtendedEmailPublisher.java, src/main/java/hudson/plugins/emailext/plugins/content/EmailExtScript.java, src/main/java/hudson/plugins/emailext/plugins/content/ScriptContent.java, src/main/java/hudson/plugins/emailext/plugins/trigger/AbstractScriptTrigger.java that allows attackers with Job/Configure permission to execute arbitrary code on the Jenkins master JVM.
CVSS Score: 9.9 (CRITICAL)
References: http://www.securityfocus.com/bid/107476; https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1340; http://www.securityfocus.com/bid/107476
CVE: CVE-2[PII_REDACTED]
Published: 2019-03-08
Description: A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.1 and earlier in pom.xml, src/main/java/hudson/plugins/groovy/StringScriptSource.java that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/107476; https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1338; http://www.securityfocus.com/bid/107476
CVE: CVE-2[PII_REDACTED]
Published: 2019-03-08
Description: A sandbox bypass vulnerability exists in Jenkins Job DSL Plugin 1.71 and earlier in job-dsl-core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy, job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhitelist.groovy, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/SandboxDslScriptLoader.groovy that allows attackers with control over Job DSL definitions to execute arbitrary code on the Jenkins master JVM.
CVSS Score: 9.9 (CRITICAL)
References: http://www.securityfocus.com/bid/107476; https://access.redhat.com/errata/RHSA-2019:0739; https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1342
CVE: CVE-2[PII_REDACTED]
Published: 2019-03-08
Description: An information exposure vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgentTemplate.java, src/main/java/com/microsoft/azure/vmagent/AzureVMCloud.java that allows attackers with Overall/Read permission to perform the 'verify configuration' form validation action, thereby obtaining limited information about the Azure configuration.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.securityfocus.com/bid/107476; https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1330; http://www.securityfocus.com/bid/107476
CVE: CVE-2[PII_REDACTED]
Published: 2019-03-08
Description: A data modification vulnerability exists in Jenkins Azure VM Agents Plugin 0.8.0 and earlier in src/main/java/com/microsoft/azure/vmagent/AzureVMAgent.java that allows attackers with Overall/Read permission to attach a public IP address to an Azure VM agent.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.securityfocus.com/bid/107476; https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1331; http://www.securityfocus.com/bid/107476