Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-65925
HistoryJun 27, 2022 - 12:00 a.m.

Jenkins Access Control Error Vulnerability (CNVD-2022-65925)

2022-06-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.001 Low

EPSS

Percentile

50.8%

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins versions 2.335 through 2.355 contain an access control error vulnerability that stems from the lack of an effective protection mechanism for permission checks in views. An attacker could use this vulnerability to access some view segments that contain sensitive information.

CPENameOperatorVersion
Jenkins Jenkins >=2.335,le2.355

0.001 Low

EPSS

Percentile

50.8%