Lucene search
Veracode Vulnerability DatabaseVERACODE:35178HistoryApr 21, 2022 - 12:42 a.m.
Privilege Escalation
2022-04-2100:42:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
jenkins
privilege escalation
vulnerability
pipelines
controller system
EPSS
0.001
Percentile
28.7%
jenkins-2-plugins is vulnerable to privilege escalation. The vulnerability exists due to a lack of sanitization of the path allowing an attacker to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.
Related
redhatcve
redhatcve
CVE-2022-25178
2022-02-17 16:52:36
nvd
nvd
CVE-2022-25178
2022-02-15 17:15:08
cve
cve
CVE-2022-25178
2022-02-15 17:15:08
alpinelinux
alpinelinux
CVE-2022-25178
2022-02-15 17:15:08
cvelist
cvelist
CVE-2022-25178
2022-02-15 16:10:58
prion
prion
Design/Logic Flaw
2022-02-15 17:15:00
github
github
osv
osv
nessus
nessus
RHEL 8 : OpenShift Container Platform 4.7.48 (RHSA-2022:1248)
2022-04-13 00:00:00
RHEL 8 : OpenShift Container Platform 4.10.6 (RHSA-2022:1025)
2022-03-29 00:00:00
RHEL 7 / 8 : OpenShift Container Platform 4.6.57 (RHSA-2022:1620)
2022-05-04 00:00:00
redhat
redhat