CVE-2022-41230

Jenkins Build-Publisher Plugin 1.22 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain names and URLs of Jenkins servers that the plugin is configured to publish builds to, as well as builds pending for publication to tho...

CVE-2022-41230

creationtimestamp| type| source ---|---|--- 2022-09-21 20:41:22+00:00| seen| https://t.me/cibsecurity/50211...

CVE-2022-41230

Jenkins Build-Publisher Plugin 1.22 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain names and URLs of Jenkins servers that the plugin is configured to publish builds to, as well as builds pending for publication to tho...

CVE-2022-41230

CVE-2022-41230 affects Jenkins Build-Publisher Plugin 1.22 and earlier. The root cause is a missing permission check in an HTTP endpoint, enabling attackers with Overall/Read permission to enumerate sensitive data: names and URLs of Jenkins servers configured for publishing, plus builds pending f...