Jenkins Missing Permission Check

Jenkins 2.503 and earlier, LTS 2.492.2 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration. This is due to an...

CVE-2025-27622 vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2025-27622

creationtimestamp| type| source ---|---|--- 2025-03-06 01:18:18+00:00| seen| https://t.me/cvedetector/19662 2025-03-06 03:34:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljoks7k2u72a 2025-03-06 16:34:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6708 2025-03-10...

org.jenkins-ci.main:jenkins-test-harness (1.581), org.jenkins-ci.main:jenkins-war (1.581) +5 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.581)

org.jenkins-ci.main:jenkins-core MAVEN version 1.581 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.581 - org.jenkins-ci.main:jenkins-war 1.581 -...

org.jenkins-ci.main:jenkins-war (1.532.1.jenkins-19453) potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.532.1.jenkins-19453)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.1.jenkins-19453 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.532.1.jenkins-19453 Source cves: CVE-2025-276...

org.jenkins-ci.main:jenkins-test-harness (1.424.2), org.jenkins-ci.main:jenkins-war (1.424.2) +4 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.424.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.2 - org.jenkins-ci.main:jenkins-war 1.424.2 -...

com.amazonaws:codedeploy (>=1.17, <=1.23), hudson.plugins.octopusdeploy:octopusdeploy (>=1.3.0, <=1.4.0) +6 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.612)

org.jenkins-ci.main:jenkins-core MAVEN version 1.612 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.amazonaws:codedeploy =1.17, =1.3.0, =2.7.0, =1.0, =1.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.553), org.jenkins-ci.main:jenkins-war (1.553) +2 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.553)

org.jenkins-ci.main:jenkins-core MAVEN version 1.553 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.553 - org.jenkins-ci.main:jenkins-war 1.553 -...

org.jenkins-ci.main:jenkins-test-harness (1.424.5), org.jenkins-ci.main:jenkins-war (1.424.5) +3 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.424.5)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.5 - org.jenkins-ci.main:jenkins-war 1.424.5 -...

org.jenkins-ci.main:jenkins-test-harness (1.544), org.jenkins-ci.main:jenkins-war (1.544) +2 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.544)

org.jenkins-ci.main:jenkins-core MAVEN version 1.544 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.544 - org.jenkins-ci.main:jenkins-war 1.544 -...

org.jenkins-ci.main:jenkins-test-harness (1.476), org.jenkins-ci.main:jenkins-war (1.476) +4 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.476)

org.jenkins-ci.main:jenkins-core MAVEN version 1.476 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.476 - org.jenkins-ci.main:jenkins-war 1.476 -...

com.cloudbees.jenkins.plugins:custom-tools-plugin (0.1), com.cwctravel:script-scm (1.3) +90 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.399)

org.jenkins-ci.main:jenkins-core MAVEN version 1.399 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin 0.1 - com.cwctravel:script-scm 1.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.421), org.jenkins-ci.main:jenkins-war (1.421) +7 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.421)

org.jenkins-ci.main:jenkins-core MAVEN version 1.421 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.421 - org.jenkins-ci.main:jenkins-war 1.421 -...

org.jenkins-ci.main:jenkins-test-harness (1.493), org.jenkins-ci.main:jenkins-war (1.493) +3 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.493)

org.jenkins-ci.main:jenkins-core MAVEN version 1.493 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.493 - org.jenkins-ci.main:jenkins-war 1.493 -...

org.jenkins-ci.main:jenkins-test-harness (1.543), org.jenkins-ci.main:jenkins-war (1.543) +1 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.543)

org.jenkins-ci.main:jenkins-core MAVEN version 1.543 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.543 - org.jenkins-ci.main:jenkins-war 1.543 -...

org.jenkins-ci.main:jenkins-test-harness (1.498), org.jenkins-ci.main:jenkins-war (1.498) +8 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.498)

org.jenkins-ci.main:jenkins-core MAVEN version 1.498 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.498 - org.jenkins-ci.main:jenkins-war 1.498 -...

net.hurstfrost.jenkins:avatar (>=1.1, <=1.2), org.jenkins-ci.main:jenkins-test-harness (1.434) +11 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.434)

org.jenkins-ci.main:jenkins-core MAVEN version 1.434 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.hurstfrost.jenkins:avatar =1.1, =0.2.0, =0.5, =1.0 - org.jvnet.hudson.plugins:sitemonitor 0...

org.jenkins-ci.main:jenkins-test-harness (1.440), org.jenkins-ci.main:jenkins-war (1.440) +9 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.440)

org.jenkins-ci.main:jenkins-core MAVEN version 1.440 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.440 - org.jenkins-ci.main:jenkins-war 1.440 -...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.4), biz.neustar.jenkins.plugins:packer (1.5) +341 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.625.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.4 -...

com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.536) +3 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.536)

org.jenkins-ci.main:jenkins-core MAVEN version 1.536 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin =1.7, =1.1, =1.2 Source cves:...