Lucene search
HistoryJul 27, 2022 - 3:15 p.m.
CVE-2022-36914
cve-2022-36914
jenkins
files found trigger plugin
permission check
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
22.0%
Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
Affected configurations
Node
jenkinsfiles_found_triggerRange≤1.5jenkins
| Vendor | Product | Version | CPE |
|---|---|---|---|
| jenkins | files_found_trigger | * | cpe:2.3:a:jenkins:files_found_trigger:*:*:*:*:*:jenkins:*:* |
Related
cvelist
cvelist
CVE-2022-36914
2022-07-27 14:27:41
osv
osv
github
github
prion
prion
Design/Logic Flaw
2022-07-27 15:15:00
cve
cve
CVE-2022-36914
2022-07-27 15:15:11
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
22.0%
Related for NVD:CVE-2022-36914