Lucene search
Veracode Vulnerability DatabaseVERACODE:39566HistoryMar 07, 2023 - 12:49 a.m.
Information Disclosure
2023-03-0700:49:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
jenkins
information disclosure
vulnerability
git repository
0.001 Low
EPSS
Percentile
35.5%
jenkins-2-plugins is vulnerable to Information Disclosure. An attacker can gain information about the existence of jobs configured to use an attacker-specified Git repository.
References
www.openwall.com/lists/oss-security/2022/07/27/1
access.redhat.com/errata/RHSA-2023:0777
access.redhat.com/security/updates/classification/#critical
bugzilla.redhat.com/show_bug.cgi?id=2119657
docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html
www.jenkins.io/security/advisory/2022-07-27/#SECURITY-284
Related
cve
cve
CVE-2022-36884
2022-07-27 15:15:08
alpinelinux
alpinelinux
CVE-2022-36884
2022-07-27 15:15:08
github
github
Lack of authentication mechanism in Jenkins Git Plugin webhook
2022-07-28 00:00:43
redhatcve
redhatcve
CVE-2022-36884
2022-08-19 05:39:14
osv
osv
Lack of authentication mechanism in Jenkins Git Plugin webhook
2022-07-28 00:00:43
CVE-2022-36884
2022-07-27 15:15:08
prion
prion
Design/Logic Flaw
2022-07-27 15:15:00
cvelist
cvelist
CVE-2022-36884
2022-07-27 14:21:25
nvd
nvd
CVE-2022-36884
2022-07-27 15:15:08
nessus
nessus
RHCOS 4 : OpenShift Container Platform 4.8.56 (RHSA-2023:0017)
2024-01-24 00:00:00
RHEL 8 : OpenShift Container Platform 4.8.56 (RHSA-2023:0017)
2024-04-28 00:00:00
RHEL 8 : OpenShift Container Platform 4.10.51 (RHSA-2023:0560)
2024-04-28 00:00:00
redhat
redhat