Lucene search
HistorySep 21, 2022 - 4:15 p.m.
CVE-2022-41244
jenkins
view26
test-reporting
plugin
hostname validation
man-in-the-middle
cve-2022-41244
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.6%
Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections.
Affected configurations
Node
jenkinsview26_test-reportingRange≤1.0.7jenkins
Related
osv
osv
Missing hostname validation in Jenkins View26 Test-Reporting Plugin
2022-09-22 00:00:29
cve
cve
CVE-2022-41244
2022-09-21 16:15:11
cvelist
cvelist
CVE-2022-41244
2022-09-21 15:46:03
prion
prion
Input validation
2022-09-21 16:15:00
github
github
Missing hostname validation in Jenkins View26 Test-Reporting Plugin
2022-09-22 00:00:29
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2022-09-21)
2022-10-07 00:00:00
Jenkins weekly < 2.370 Multiple Vulnerabilities
2022-10-07 00:00:00
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.6%
Related for NVD:CVE-2022-41244