Lucene search
GoogleOSV:GHSA-X454-72FX-69Q3HistoryMay 18, 2022 - 12:00 a.m.
Missing permission check in Jenkins SSH Plugin
2022-05-1800:00:40
Google
osv.dev
25
0.001 Low
EPSS
Percentile
22.0%
A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:ssh | eq | 2.6 | |
| org.jenkins-ci.plugins:ssh | eq | 2.5 | |
| org.jenkins-ci.plugins:ssh | eq | 2.4 | |
| org.jenkins-ci.plugins:ssh | eq | 2.6.1 |
Related
osv
osv
CVE-2022-30957
2022-05-17 15:15:09
prion
prion
Information disclosure
2022-05-17 15:15:00
cve
cve
CVE-2022-30957
2022-05-17 15:15:09
github
github
Missing permission check in Jenkins SSH Plugin
2022-05-18 00:00:40
nvd
nvd
CVE-2022-30957
2022-05-17 15:15:09
cvelist
cvelist
CVE-2022-30957
2022-05-17 14:06:27
nessus
nessus