Lucene search

K
osvGoogleOSV:CVE-2022-28134
HistoryMar 29, 2022 - 1:15 p.m.

CVE-2022-28134

2022-03-2913:15:08
Google
osv.dev
7
jenkins
bitbucket
permission checks

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

22.0%

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers.

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

22.0%