Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08221
HistoryJan 21, 2022 - 12:00 a.m.

Jenkins Mailer Plugin Permissions and Access Control Issues Vulnerability

2022-01-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.001 Low

EPSS

Percentile

40.4%

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Mailer Plugin 391.ve4a 38c1b cf4b and prior versions are vulnerable to a privilege error. The vulnerability stems from the program not performing permission checks. An attacker could exploit the vulnerability to resolve the attacker-specified hostname with the help of the DNS used by the Jenkins instance.

0.001 Low

EPSS

Percentile

40.4%