Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54932
HistoryMar 31, 2022 - 12:00 a.m.

Jenkins Pipeline Phoenix AutoTest Plugin访问控制错误漏洞

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

28.6%

Jenkins Pipeline is a set of plug-ins that support the implementation and integration of continuous delivery pipelines into Jenkins.An access control error vulnerability exists in Jenkins Pipeline Phoenix AutoTest Plugin 1.3 and earlier, which stems from the plugin not performing permission checks across multiple HTTP endpoints, and an attacker with overall /read privileges, an attacker could use this vulnerability to enumerate the credential IDs of credentials stored in Jenkins.

0.001 Low

EPSS

Percentile

28.6%

Related for CNVD-2022-54932