Default credentials

2023-11-2914:15:00

PRIOn knowledge base

www.prio-n.com

jenkins

neuvector vulnerability scanner

unauthorized access

permission check

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.4%

JSON

A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.

CPENameOperatorVersion
neuvector_vulnerability_scannerle1.22

CPE	Name	Operator	Version
	neuvector_vulnerability_scanner	le	1.22

References

www.openwall.com/lists/oss-security/2023/11/29/1

www.jenkins.io/security/advisory/2023-11-29/