Lucene search
GoogleOSV:GHSA-PXP5-G66H-WPV2HistorySep 22, 2022 - 12:00 a.m.
Missing hostname validation in Jenkins View26 Test-Reporting Plugin
2022-09-2200:00:29
Google
osv.dev
5
jenkins
view26
test-reporting plugin
hostname validation
man-in-the-middle
security
vulnerability
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.6%
Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections.
Related
nvd
nvd
CVE-2022-41244
2022-09-21 16:15:11
cve
cve
CVE-2022-41244
2022-09-21 16:15:11
cvelist
cvelist
CVE-2022-41244
2022-09-21 15:46:03
prion
prion
Input validation
2022-09-21 16:15:00
github
github
Missing hostname validation in Jenkins View26 Test-Reporting Plugin
2022-09-22 00:00:29
nessus
nessus
Jenkins weekly < 2.370 Multiple Vulnerabilities
2022-10-07 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-09-21)
2022-10-07 00:00:00
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.6%
Related for OSV:GHSA-PXP5-G66H-WPV2