0.8.1

DATE	CVE	VULNERABILITY TITLE	RISK
2023-05-16	CVE-2023-32990	Incorrect Permission Assignment for Critical Resource vulnerability in Jenkins Azure VM Agents A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method. network low complexity jenkins CWE-732	6.5
2023-05-16	CVE-2023-32988	Insufficiently Protected Credentials vulnerability in Jenkins Azure VM Agents A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. network low complexity jenkins CWE-522	4.3
2023-05-16	CVE-2023-32989	Cross-Site Request Forgery (CSRF) vulnerability in Jenkins Azure VM Agents A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method. network low complexity jenkins CWE-352	8.8