Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-38666HistoryNov 15, 2022 - 8:15 p.m.
CVE-2022-38666
2022-11-1520:15:11
Alpine Linux Development Team
security.alpinelinux.org
12
jenkins
integration
ssl/tls
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
34.3%
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.146 and earlier unconditionally disables SSL/TLS certificate and hostname validation for several features.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.16-community | noarch | jenkins | = 2.346.2-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | jenkins | = 2.361.2-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | jenkins | = 2.387.3-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | jenkins | = 2.440.3-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | jenkins | = 2.440.2-r0 | UNKNOWN |
| Alpine | edge-community | noarch | jenkins | = 2.452.2-r0 | UNKNOWN |
Related
cvelist
cvelist
CVE-2022-38666
2022-11-15 00:00:00
nvd
nvd
CVE-2022-38666
2022-11-15 20:15:11
cve
cve
CVE-2022-38666
2022-11-15 20:15:11
github
github
prion
prion
Input validation
2022-11-15 20:15:00
osv
osv
nessus
nessus
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
34.3%
Related for ALPINE:CVE-2022-38666