CVE-2022-27198

A cross-site request forgery CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token...

Jenkins CloudBees AWS Credentials 安全漏洞

Jenkins CloudBees AWS Credentials is Jenkins open source an application plugin . The plugin allows storing Amazon IAM credentials in the Jenkins Credentials API. A security vulnerability exists in Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier, which stems from not performing permissio...