Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-43431
HistoryOct 19, 2022 - 4:15 p.m.

Information disclosure

2022-10-1916:15:00
PRIOn knowledge base
www.prio-n.com
1
jenkins
compuware strobe
measurement plugin
credential id enumeration
http endpoint
permission check
nvd

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

Jenkins Compuware Strobe Measurement Plugin 1.0.1 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

CPENameOperatorVersion
compuware_strobe_measurementle1.0.1

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

Related for PRION:CVE-2022-43431