Advisories for Maven/Org.jenkins-Ci.plugins/Oracle-Cloud-Infrastructure-Compute-Classic package

2019

Incorrect Permission Assignment for Critical Resource

A missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials.