Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54950
HistoryMar 22, 2022 - 12:00 a.m.

Jenkins CloudBees AWS Credentials Plugin Permissions Licensing and Access Control Issues Vulnerability

2022-03-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
jenkins
cloudbees
aws
credentials
plugin
permissions
vulnerability
access control

EPSS

0.001

Percentile

22.0%

Jenkins CloudBees AWS Credentials and Jenkins are both (Jenkins) open source products.Jenkins CloudBees AWS Credentials is an application plug-in. Jenkins is an application that allows storage of Amazon IAM credentials in the Jenkins Credentials API. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.A permission permission and access control issue vulnerability exists in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier versions, which could be exploited by an attacker with overall/read access can exploit the vulnerability to connect to AWS services using their specified token.

EPSS

0.001

Percentile

22.0%