CVE-2022-36910

🗓️ 27 Jul 2022 14:26:54Reported by jenkinsType

Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier has HTTP endpoints without permission checks, enabling attackers to reindex the database and access restricted job informatio

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2022-36910	27 Jul 202215:15	–	attackerkb
AlpineLinux	CVE-2022-36910	27 Jul 202214:26	–	alpinelinux
BDU FSTEC	The vulnerability of the Jenkins Lucene-Search Plugin, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.	10 Aug 202200:00	–	bdu_fstec
Circl	CVE-2022-36910	27 Jul 202218:49	–	circl
Tenable Nessus	Jenkins Enterprise and Operations Center 2.303.x < 2.303.30.0.15 / 2.346.2.3 Multiple Vulnerabilities (CloudBees Security Advisory 2022-07-27)	7 Oct 202200:00	–	nessus
CNNVD	Jenkins Lucene-Search Plugin 安全漏洞	27 Jul 202200:00	–	cnnvd
CVE	CVE-2022-36910	27 Jul 202214:26	–	cve
EUVD	EUVD-2022-6375	3 Oct 202520:07	–	euvd
Github Security Blog	Lucene-Search Plugin does not perform permission checks in several HTTP endpoints	28 Jul 202200:00	–	github
NVD	CVE-2022-36910	27 Jul 202215:15	–	nvd

[
  {
    "product": "Jenkins Lucene-Search Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "370.v62a5f618cd3a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unknown",
        "version": "next of 370.v62a5f618cd3a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jenkins	www.jenkins.io/security/advisory/2022-07-27/
openwall	www.openwall.com/lists/oss-security/2022/07/27/1

24 Oct 2023 14:24Current

5.8Medium risk

Vulners AI Score5.8

EPSS0.00419