Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08224
HistoryJan 21, 2022 - 12:00 a.m.

Jenkins Permissions and Access Control Issues Vulnerability

2022-01-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
jenkins
automation server
security vulnerability
credential enumeration
privilege checking
ssh agent plugin

EPSS

0.001

Percentile

22.0%

Jenkins is a Jenkins open source application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins SSH Agent Plugin 1.23 previously had a security vulnerability that stemmed from a lack of privilege checking, which could be exploited by an attacker to enumerate credentials stored in Jenkins using Overall Read access id.

EPSS

0.001

Percentile

22.0%

Related for CNVD-2022-08224