Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-43413HistoryOct 19, 2022 - 4:15 p.m.
CVE-2022-43413
2022-10-1916:15:00
Alpine Linux Development Team
security.alpinelinux.org
14
0.001 Low
EPSS
Percentile
21.3%
Jenkins Job Import Plugin 3.5 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.16-community | noarch | jenkins | = 2.346.2-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | jenkins | = 2.361.2-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | jenkins | = 2.387.3-r0 | UNKNOWN |
| Alpine | edge-community | noarch | jenkins | = 2.440.2-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | jenkins | = 2.440.3-r0 | UNKNOWN |
Related
github
github
cve
cve
CVE-2022-43413
2022-10-19 16:15:00
prion
prion
Information disclosure
2022-10-19 16:15:00
osv
osv
Jenkins Job Import Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins
2022-10-19 19:00:22
CVE-2022-43413
2022-10-19 16:15:10
cvelist
cvelist
CVE-2022-43413
2022-10-19 00:00:00
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2022-10-19)
2023-03-03 00:00:00