Lucene search
GitHub Advisory DatabaseGHSA-PXP5-G66H-WPV2HistorySep 22, 2022 - 12:00 a.m.
Missing hostname validation in Jenkins View26 Test-Reporting Plugin
2022-09-2200:00:29
CWE-297
GitHub Advisory Database
github.com
9
jenkins
view26
test-reporting
plugin
hostname validation
man-in-the-middle
attack
software
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.6%
Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections.
Affected configurations
Node
org.jenkinsci.plugins\Matchview26
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:view26 | le | 1.0.7 |
Related
osv
osv
Missing hostname validation in Jenkins View26 Test-Reporting Plugin
2022-09-22 00:00:29
nvd
nvd
CVE-2022-41244
2022-09-21 16:15:11
cve
cve
CVE-2022-41244
2022-09-21 16:15:11
cvelist
cvelist
CVE-2022-41244
2022-09-21 15:46:03
prion
prion
Input validation
2022-09-21 16:15:00
nessus
nessus
Jenkins weekly < 2.370 Multiple Vulnerabilities
2022-10-07 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-09-21)
2022-10-07 00:00:00
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.6%
Related for GHSA-PXP5-G66H-WPV2