Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-76705
HistoryNov 14, 2022 - 12:00 a.m.

Jenkins Pipeline SCM API for Blue Ocean Plugin Unauthorized Access Vulnerability

2022-11-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
jenkins
pipeline
scm
api
blue ocean plugin
vulnerability
unauthorized access
sensitive information

0.001 Low

EPSS

Percentile

28.5%

The Blue Ocean Plugin is an aggregation tool designed for Jenkins Pipeline, and is of course compatible with free-style projects. It graphically illustrates the flow of the pipeline, making it more intuitive. Jenkins Pipeline SCM API for Blue Ocean Plugin 1.25.3 and prior versions are vulnerable to unauthorized access, and an attacker with certain privileges could exploit the vulnerability to obtain sensitive information.

CPENameOperatorVersion
jenkins blue oceanle1.25.3

0.001 Low

EPSS

Percentile

28.5%