Lucene search
HistoryNov 15, 2022 - 8:15 p.m.
CVE-2022-45379
jenkins
script security
sha-1
collision attacks
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
52.6%
Jenkins Script Security Plugin 1189.vb_a_b_7c8fd5fde and earlier stores whole-script approvals as the SHA-1 hash of the script, making it vulnerable to collision attacks.
Affected configurations
Node
jenkinsscript_securityRange<1190.v65867a_a_47126jenkins
Related
cve
cve
CVE-2022-45379
2022-11-15 20:15:11
veracode
veracode
Collision Attack
2023-03-07 00:49:51
github
github
prion
prion
Design/Logic Flaw
2022-11-15 20:15:00
cvelist
cvelist
CVE-2022-45379
2022-11-15 00:00:00
osv
osv
CVE-2022-45379
2022-11-15 20:15:11
alpinelinux
alpinelinux
CVE-2022-45379
2022-11-15 20:15:11
redhatcve
redhatcve
CVE-2022-45379
2022-11-16 02:55:58
ibm
ibm
nessus
nessus
RHEL 8 : OpenShift Container Platform 4.10.51 (RHSA-2023:0560)
2024-04-28 00:00:00
RHCOS 4 : OpenShift Container Platform 4.10.51 (RHSA-2023:0560)
2024-01-24 00:00:00
RHCOS 4 : OpenShift Container Platform 4.9.56 (RHSA-2023:0777)
2024-01-24 00:00:00
redhat
redhat
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
52.6%
Related for NVD:CVE-2022-45379