CVE-2022-25211

2022-02-1517:15:11

Google

osv.dev

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

A missing permission check in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server using attacker-specified credentials.

CPENameOperatorVersion
swamp-plugineqreleases/0.7.10
swamp-plugineqreleases/0.7.8
swamp-plugineqreleases/0.7.3
swamp-plugineqswamp-1.2.2
swamp-plugineqreleases/1.0.0
swamp-plugineqswamp-1.1.0
swamp-plugineqswamp-1.1.2
swamp-plugineqreleases/0.7.5
swamp-plugineqswamp-1.0.6
swamp-plugineqreleases/0.7.2

Name	Operator	Version
swamp-plugin	eq	releases/0.7.10
swamp-plugin	eq	releases/0.7.8
swamp-plugin	eq	releases/0.7.3
swamp-plugin	eq	swamp-1.2.2
swamp-plugin	eq	releases/1.0.0
swamp-plugin	eq	swamp-1.1.0
swamp-plugin	eq	swamp-1.1.2
swamp-plugin	eq	releases/0.7.5
swamp-plugin	eq	swamp-1.0.6
swamp-plugin	eq	releases/0.7.2