Remote Code Execution (RCE)

2022-03-0823:55:42

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

60.8%

JSON

jenkins-2-plugins is vulnerable to remote code execution. The vulnerability exists due to the lack of sanitization of the name of an image or a tag.

CPENameOperatorVersion
jenkins-2-pluginseq3.11.1591354111__1.el7
jenkins-2-pluginseq4.9.1630555871__1.el8
jenkins-2-pluginseq4.6.1612257979__1.el8
jenkins-2-pluginseq3.11.1597310986__1.el7
jenkins-2-pluginseq4.8.1642420115__1.el8
jenkins-2-pluginseq4.6.1605620903__1.el8
jenkins-2-pluginseq3.11.1568994366__1.el7
jenkins-2-pluginseq3.11.1603460090__1.el7
jenkins-2-pluginseq4.6.1623162648__1.el8
jenkins-2-pluginseq3.11.1542061886__1.el7

Name	Operator	Version
jenkins-2-plugins	eq	3.11.1591354111__1.el7
jenkins-2-plugins	eq	4.9.1630555871__1.el8
jenkins-2-plugins	eq	4.6.1612257979__1.el8
jenkins-2-plugins	eq	3.11.1597310986__1.el7
jenkins-2-plugins	eq	4.8.1642420115__1.el8
jenkins-2-plugins	eq	4.6.1605620903__1.el8
jenkins-2-plugins	eq	3.11.1568994366__1.el7
jenkins-2-plugins	eq	3.11.1603460090__1.el7
jenkins-2-plugins	eq	4.6.1623162648__1.el8
jenkins-2-plugins	eq	3.11.1542061886__1.el7