Lucene search
HistorySep 21, 2022 - 4:15 p.m.
CVE-2022-41243
jenkins
smalltest plugin
hostname validation
view26 server
man-in-the-middle attack
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.6%
Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections.
Affected configurations
Node
jenkinssmalltestRange≤1.0.4jenkins
Related
prion
prion
Input validation
2022-09-21 16:15:00
cvelist
cvelist
CVE-2022-41243
2022-09-21 15:46:01
cve
cve
CVE-2022-41243
2022-09-21 16:15:10
github
github
Jenkins SmallTest Plugin missing hostname validation
2022-09-22 00:00:28
osv
osv
Jenkins SmallTest Plugin missing hostname validation
2022-09-22 00:00:28
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2022-09-21)
2022-10-07 00:00:00
Jenkins weekly < 2.370 Multiple Vulnerabilities
2022-10-07 00:00:00
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.6%
Related for NVD:CVE-2022-41243