Lucene search
HistoryNov 15, 2022 - 8:15 p.m.
CVE-2022-45385
missing permission check
unauthenticated attackers
triggering builds
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
31.0%
A missing permission check in Jenkins CloudBees Docker Hub/Registry Notification Plugin 2.6.2 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository.
Affected configurations
Node
jenkinscloudbees_docker_hub\/registry_notificationRange<2.6.2.1jenkins
Related
osv
osv
cve
cve
CVE-2022-45385
2022-11-15 20:15:11
cvelist
cvelist
CVE-2022-45385
2022-11-15 00:00:00
prion
prion
Design/Logic Flaw
2022-11-15 20:15:00
github
github
nessus
nessus
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
31.0%
Related for NVD:CVE-2022-45385