PT-2022-20400 · Jenkins · Jenkins Script Security Plugin +1

🗓️ 17 May 2022 00:00:00Reported by Positive TechnologiesType

Jenkins Script Security Plugin flaw allows forged requests in versions 1158.v7c1b 73a 69a 08 and earlier.

Reporter	Title	Published	Views	Family All 32
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services - Multiple CVEs addressed (February 2024)	15 Apr 202502:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2024.	1 Mar 202419:39	–	ibm
ATTACKERKB	CVE-2022-30946	17 May 202215:15	–	attackerkb
AlpineLinux	CVE-2022-30946	17 May 202214:05	–	alpinelinux
Tenable Nessus	Jenkins Enterprise and Operations Center 2.303.x < 2.303.30.0.13 / 2.332.3.4 Multiple Vulnerabilities (CloudBees Security Advisory 2022-05-17)	24 May 202200:00	–	nessus
Tenable Nessus	Jenkins plugins Multiple Vulnerabilities (2022-05-17)	16 Jun 202200:00	–	nessus
Tenable Nessus	RHEL 8 : OpenShift Container Platform 4.8.56 (RHSA-2023:0017)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : OpenShift Container Platform 4.10.51 (RHSA-2023:0560)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : OpenShift Container Platform 4.9.56 (RHSA-2023:0777)	23 Apr 202400:00	–	nessus
Tenable Nessus	RHCOS 4 : OpenShift Container Platform 4.8.56 (RHSA-2023:0017)	24 Jan 202400:00	–	nessus

Source	Link
osv	www.osv.dev/vulnerability/CVE-2022-30946
osv	www.osv.dev/vulnerability/GHSA-qwgx-mrv5-87j8
jenkins	www.jenkins.io/security/advisory/2022-05-17/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-30946
github	www.github.com/jenkinsci/script-security-plugin
github	www.github.com/jenkinsci/script-security-plugin/commit/35f6a0b8207ed3a32a85f27c1312da6cd738eeaa
openwall	www.openwall.com/lists/oss-security/2022/05/17/8
t	www.t.me/cvenotify/64911

22 Dec 2023 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.3

CVSS 3.14.3

EPSS0.00104