Lucene search
PRIOn knowledge basePRION:CVE-2022-34180HistoryJun 23, 2022 - 5:15 p.m.
Code injection
2022-06-2317:15:00
PRIOn knowledge base
www.prio-n.com
3
0.002 Low
EPSS
Percentile
51.4%
Jenkins Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for “unprotected” status badge access, allowing attackers without any permissions to obtain the build status badge icon for any attacker-specified job and/or build.
| CPE | Name | Operator | Version |
|---|---|---|---|
| embeddable_build_status | le | 2.0.3 |
Related
osv
osv
Improper authorization in Jenkins Embeddable Build Status Plugin bypasses ViewStatus permission requirement
2022-06-24 00:00:31
CVE-2022-34180
2022-06-23 17:15:15
nvd
nvd
CVE-2022-34180
2022-06-23 17:15:15
cvelist
cvelist
CVE-2022-34180
2022-06-22 14:41:06
github
github
cve
cve
CVE-2022-34180
2022-06-23 17:15:15
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2022-06-22)
2022-07-15 00:00:00
Jenkins LTS < 2.332.4 / Jenkins weekly < 2.356 Multiple Vulnerabilities
2022-07-15 00:00:00