Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-58417
HistoryJul 04, 2022 - 12:00 a.m.

Jenkins RQM Plugin Licensing Issue Vulnerability

2022-07-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.001 Low

EPSS

Percentile

28.4%

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins RQM Plugin version 2.8 and prior versions are vulnerable to an authorization issue that stems from a missing check. The vulnerability allows an attacker with aggregate (read) privileges to enumerate the credential ID of credentials stored in Jenkins.

CPENameOperatorVersion
jenkins rqm pluginle2.8

0.001 Low

EPSS

Percentile

28.4%

Related for CNVD-2022-58417