Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-16715
HistoryFeb 17, 2022 - 12:00 a.m.

Jenkins Snow Commander Plugin Access Control Error Vulnerability

2022-02-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

EPSS

0.001

Percentile

28.4%

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Snow Commander Plugin 2.0 and earlier versions are vulnerable to an access control error that stems from not performing permission checks in methods that implement form validation. An attacker could use this vulnerability to connect to an attacker-specified Web server via an attacker-specified credential ID to capture credentials stored in Jenkins.

EPSS

0.001

Percentile

28.4%

Related for CNVD-2022-16715