Lucene search

K
osvGoogleOSV:CVE-2022-28137
HistoryMar 29, 2022 - 1:15 p.m.

CVE-2022-28137

2022-03-2913:15:08
Google
osv.dev
8
jenkins
security
cve-2022-28137
permission check
attackers

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

22.0%

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

22.0%