Lucene search
HistoryOct 19, 2022 - 4:15 p.m.
CVE-2022-43431
cve-2022-43431
jenkins
compuware strobe
http endpoint
permission check
overall/read permission
credentials ids
enumeration
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
22.0%
Jenkins Compuware Strobe Measurement Plugin 1.0.1 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Affected configurations
Node
jenkinscompuware_strobe_measurementRange≤1.0.1wordpress
Related
cve
cve
CVE-2022-43431
2022-10-19 16:15:11
cvelist
cvelist
CVE-2022-43431
2022-10-19 00:00:00
osv
osv
github
github
prion
prion
Information disclosure
2022-10-19 16:15:00
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2022-10-19)
2023-03-03 00:00:00
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
22.0%
Related for NVD:CVE-2022-43431