Lucene search
Veracode Vulnerability DatabaseVERACODE:35176HistoryApr 21, 2022 - 12:42 a.m.
Privilege Escalation
2022-04-2100:42:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
50
jenkins-2-plugins
privilege escalation
path sanitization
pipelines permission
arbitrary files
jenkins controller
software
EPSS
0.001
Percentile
28.4%
jenkins-2-plugins is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of the path allowing an attacker to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.
Related
prion
prion
Design/Logic Flaw
2022-02-15 17:15:00
cve
cve
CVE-2022-25176
2022-02-15 17:15:08
alpinelinux
alpinelinux
CVE-2022-25176
2022-02-15 17:15:08
github
github
cvelist
cvelist
CVE-2022-25176
2022-02-15 16:10:55
osv
osv
nvd
nvd
CVE-2022-25176
2022-02-15 17:15:08
redhatcve
redhatcve
CVE-2022-25176
2022-02-17 16:38:20
nessus
nessus
RHEL 8 : OpenShift Container Platform 4.7.48 (RHSA-2022:1248)
2022-04-13 00:00:00
RHEL 8 : OpenShift Container Platform 4.9.26 (RHSA-2022:1021)
2022-03-29 00:00:00
RHEL 7 : OpenShift Container Platform 3.11.685 (RHSA-2022:1420)
2022-04-27 00:00:00
redhat
redhat