Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-05038
HistoryJan 16, 2022 - 12:00 a.m.

Jenkins Metrics Plugin Licensing Issue Vulnerability

2022-01-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.0004 Low

EPSS

Percentile

12.8%

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Metrics Plugin in version 4.0.2.8 and earlier is vulnerable to an authorization issue that stems from an unencrypted access key stored in the global configuration file of the Jenkins controller, which allows users to access the Jenkins controller file system. No details of the vulnerability are currently available.

CPENameOperatorVersion
Jenkins Metrics Plugin <=4.eq0.2.8

0.0004 Low

EPSS

Percentile

12.8%