Lucene search

K
cvelistJenkinsCVELIST:CVE-2022-25180
HistoryFeb 15, 2022 - 4:11 p.m.

CVE-2022-25180

2022-02-1516:11:02
jenkins
raw.githubusercontent.com
1

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.3%

Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline.

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.3%