Lucene search

K
osvGoogleOSV:CVE-2022-30957
HistoryMay 17, 2022 - 3:15 p.m.

CVE-2022-30957

2022-05-1715:15:09
Google
osv.dev
6
cve-2022-30957
jenkins
ssh plugin
permission check
attackers
credentials
enumeration

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

22.0%

A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

22.0%

Related for OSV:CVE-2022-30957