Lucene search
GoogleOSV:GHSA-8P8Q-WVXX-JQ94HistoryFeb 16, 2022 - 12:01 a.m.
Missing permission check in Jenkins SWAMP Plugin allows capturing credentials
2022-02-1600:01:13
Google
osv.dev
9
jenkins
swamp plugin
permission check
form validation
overall/read
credentials
security vulnerability
EPSS
0.001
Percentile
42.8%
SWAMP Plugin 1.2.6 and earlier does not perform a permission check in a method implementing form validation.
This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Related
cvelist
cvelist
CVE-2022-25211
2022-02-15 16:11:49
cve
cve
CVE-2022-25211
2022-02-15 17:15:11
osv
osv
CVE-2022-25211
2022-02-15 17:15:11
prion
prion
Design/Logic Flaw
2022-02-15 17:15:00
cnvd
cnvd
Jenkins SWAMP Plugin Access Control Error Vulnerability
2022-02-17 00:00:00
github
github
nvd
nvd
CVE-2022-25211
2022-02-15 17:15:11
