Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08221
HistoryJan 21, 2022 - 12:00 a.m.

Jenkins Mailer Plugin Permissions and Access Control Issues Vulnerability

2022-01-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
jenkins
mailer plugin
access control
dns
security issue

EPSS

0.001

Percentile

32.7%

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Mailer Plugin 391.ve4a 38c1b cf4b and prior versions are vulnerable to a privilege error. The vulnerability stems from the program not performing permission checks. An attacker could exploit the vulnerability to resolve the attacker-specified hostname with the help of the DNS used by the Jenkins instance.

EPSS

0.001

Percentile

32.7%