Lucene search
+L

5 matches found

NVD
NVD
•added 2022/11/15 8:15 p.m.•44 views

CVE-2022-45383

An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fabd860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission...

6.5CVSS0.00692EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/15 12:00 a.m.•3 views

CVE-2022-45383: Incorrect Authorization

An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fabd860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission...

6.5CVSS5.7AI score0.00692EPSS
SaveExploits0References3
Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/11/15 12:00 a.m.•21 views

Incorrect permission checks in support-core

support-core defines the permission Support/DownloadBundle that allows users without Overall/Administer permission to create and download support bundles containing a limited set of diagnostic information. support-core 1206.v14049fabd860 and earlier does not correctly perform permission checks in...

6.5CVSS6.4AI score0.00692EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2022/11/15 12:00 a.m.•9 views

PT-2022-27485 · Jenkins · Jenkins Support Core Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Support Core Plugin versions 1206.v14049fa b d860 and earlier Description: An issue exists due to an incorrect permission check, allowing attackers with Support/DownloadBundle permission to download previously created support bundles...

6.5CVSS6.2AI score0.00692EPSS
SaveExploits0References10
Mend
Mend
•added 2022/11/15 12:00 a.m.•5 views

CVE-2022-45383

An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fabd860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission...

7.1CVSS0.00692EPSS
SaveExploits0References5
Rows per page
Query Builder