Lucene search

PRIOn knowledge basePRION:CVE-2022-20614

HistoryJan 12, 2022 - 8:15 p.m.

Design/Logic Flaw

2022-01-1220:15:00

PRIOn knowledge base

www.prio-n.com

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.4%

JSON

A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

CPENameOperatorVersion
mailereq391.0.0-ve4-a38-c1-bcf4-b
mailerlt1.34.2
communications_cloud_native_core_automated_test_suiteeq1.9.0

Name	Operator	Version
mailer	eq	391.0.0-ve4-a38-c1-bcf4-b
mailer	lt	1.34.2
communications_cloud_native_core_automated_test_suite	eq	1.9.0

References

www.openwall.com/lists/oss-security/2022/01/12/6

www.jenkins.io/security/advisory/2022-01-12/

www.oracle.com/security-alerts/cpuapr2022.html