Lucene search
GoogleOSV:GHSA-JPXJ-VGQ5-PRJCHistoryJan 13, 2022 - 12:01 a.m.
OS command execution vulnerability in Jenkins Docker Commons Plugin
2022-01-1300:01:03
Google
osv.dev
7
Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS command execution vulnerability exploitable by attackers with Item/Configure permission or able to control the contents of a previously configured job’s SCM repository.
References
www.openwall.com/lists/oss-security/2022/01/12/6
github.com/jenkinsci/docker-commons-plugin
github.com/jenkinsci/docker-commons-plugin/commit/c069b79c31c5aa80a01b0c462f0dc6b41751f059
nvd.nist.gov/vuln/detail/CVE-2022-20617
plugins.jenkins.io/docker-commons
www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1878
Related
cve
cve
CVE-2022-20617
2022-01-12 20:15:08
github
github
OS command execution vulnerability in Jenkins Docker Commons Plugin
2022-01-13 00:01:03
nvd
nvd
CVE-2022-20617
2022-01-12 20:15:08
redhatcve
redhatcve
CVE-2022-20617
2022-01-24 18:05:39
osv
osv
CVE-2022-20617
2022-01-12 20:15:08
prion
prion
Command injection
2022-01-12 20:15:00
veracode
veracode
Remote Code Execution (RCE)
2022-03-08 23:55:42
cvelist
cvelist
CVE-2022-20617
2022-01-12 19:05:53
nessus
nessus
RHEL 8 : OpenShift Container Platform 4.6.55 (RHSA-2022:0565)
2022-02-25 00:00:00
RHEL 8 : OpenShift Container Platform 4.9.19 (RHSA-2022:0339)
2022-02-10 00:00:00
RHEL 7 : OpenShift Container Platform 3.11.634 (RHSA-2022:0555)
2022-02-24 00:00:00
redhat
redhat