Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-49805
HistoryMay 19, 2022 - 12:00 a.m.

Jenkins SSH Plugin Permissions and Access Control Issues Vulnerability

2022-05-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
90

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.The Jenkins SSH Plugin 2.6.1 and earlier versions are vulnerable to a permission permission and access control issue, which stems from a lack of permission checking and could be exploited by an attacker to obtain the stored credential IDs stored in Jenkins.

CPENameOperatorVersion
Jenkins SSH Pluginlt2.6.1