Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54947
HistoryMar 31, 2022 - 12:00 a.m.

Jenkins Bitbucket Server Integration Plugin授权问题漏洞

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

22.2%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application software.Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier versions are vulnerable to an authorization issue that stems from multiple HTTP endpoints do not perform permission checks. An attacker with overall/read access can create, view, and delete BitBucket Server users using this vulnerability.

0.001 Low

EPSS

Percentile

22.2%