CVE-2022-36896

🗓️ 27 Jul 2022 14:23:58Reported by jenkinsType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 85 Views

A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier allows attackers to enumerate hosts and credentials

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-36896	27 Jul 202215:15	–	attackerkb
Circl	CVE-2022-36896	27 Jul 202218:49	–	circl
Tenable Nessus	Jenkins Enterprise and Operations Center 2.303.x < 2.303.30.0.15 / 2.346.2.3 Multiple Vulnerabilities (CloudBees Security Advisory 2022-07-27)	7 Oct 202200:00	–	nessus
CNNVD	Jenkins Plugin 安全漏洞	27 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-36896	27 Jul 202214:23	–	cvelist
EUVD	EUVD-2022-6275	3 Oct 202520:07	–	euvd
Github Security Blog	Jenkins Compuware Source Code Download is missing authorization	28 Jul 202200:00	–	github
NVD	CVE-2022-36896	27 Jul 202215:15	–	nvd
OSV	GHSA-75FC-FV3P-XH82 Jenkins Compuware Source Code Download is missing authorization	28 Jul 202200:00	–	osv
Prion	Design/Logic Flaw	27 Jul 202215:15	–	prion

NVD

Node

jenkins compuware_source_code_download_for_endevor,_pds,_and_ispwRange≤2.0.12jenkins

[
  {
    "product": "Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "2.0.12",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]