Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54929
HistoryMar 31, 2022 - 12:00 a.m.

Jenkins Proxmox Plugin Licensing Issue Vulnerability

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
13

0.001 Low

EPSS

Percentile

22.2%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins Proxmox Plugin 0.7.0 and earlier versions are vulnerable to an authorization issue, which stems from the plugin not performing permission checks across multiple HTTP endpoints, and an attacker with An attacker with overall/read privileges can use the vulnerability to connect to the attacker-specified host using the username and password they have developed.

CPENameOperatorVersion
jenkins proxmox pluginlt0.7.0

0.001 Low

EPSS

Percentile

22.2%

Related for CNVD-2022-54929