Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-36882 State: PUBLISHED Published: 2022-07-27T14:20:59 Last Updated: 2024-08-03T10:14:29.407Z Vendors: Jenkins project Products: Jenkins Git Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-284 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36883 State: PUBLISHED Published: 2022-07-27T14:21:12 Last Updated: 2024-08-03T10:14:28.862Z Vendors: Jenkins project Products: Jenkins Git Plugin Description: A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-284 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36884 State: PUBLISHED Published: 2022-07-27T14:21:25 Last Updated: 2024-08-03T10:14:29.343Z Vendors: Jenkins project Products: Jenkins Git Plugin Description: The webhook endpoint in Jenkins Git Plugin 4.11.3 and earlier provide unauthenticated attackers information about the existence of jobs configured to use an attacker-specified Git repository. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-284 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36885 State: PUBLISHED Published: 2022-07-27T14:21:38 Last Updated: 2024-08-03T10:14:29.453Z Vendors: Jenkins project Products: Jenkins GitHub Plugin Description: Jenkins GitHub Plugin 1.34.4 and earlier uses a non-constant time comparison function when checking whether the provided and computed webhook signatures are equal, allowing attackers to use statistical methods to obtain a valid webhook signature. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1849 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36886 State: PUBLISHED Published: 2022-07-27T14:21:51 Last Updated: 2024-08-03T10:14:29.477Z Vendors: Jenkins project Products: Jenkins External Monitor Job Type Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins External Monitor Job Type Plugin 191.v363d0d1efdf8 and earlier allows attackers to create runs of an external job. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2762 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36887 State: PUBLISHED Published: 2022-07-27T14:22:04 Last Updated: 2024-08-03T10:14:29.218Z Vendors: Jenkins project Products: Jenkins Job Configuration History Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Job Configuration History Plugin 1155.v28a_46a_cc06a_5 and earlier allows attackers to delete entries from job, agent, and system configuration history, or restore older versions of job, agent, and system configurations. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2766 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36888 State: PUBLISHED Published: 2022-07-27T14:22:14 Last Updated: 2024-08-03T10:14:29.398Z Vendors: Jenkins project Products: Jenkins HashiCorp Vault Plugin Description: A missing permission check in Jenkins HashiCorp Vault Plugin 354.vdb_858fd6b_f48 and earlier allows attackers with Overall/Read permission to obtain credentials stored in Vault with attacker-specified path and keys. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2593 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36889 State: PUBLISHED Published: 2022-07-27T14:22:27 Last Updated: 2024-08-03T10:14:29.368Z Vendors: Jenkins project Products: Jenkins Deployer Framework Plugin Description: Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the application path of the applications when configuring a deployment, allowing attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller file system to the selected service. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2764 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36890 State: PUBLISHED Published: 2022-07-27T14:22:40 Last Updated: 2024-08-03T10:14:29.478Z Vendors: Jenkins project Products: Jenkins Deployer Framework Plugin Description: Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the name of files in methods implementing form validation, allowing attackers with Item/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2206 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36891 State: PUBLISHED Published: 2022-07-27T14:22:53 Last Updated: 2024-08-03T10:14:29.393Z Vendors: Jenkins project Products: Jenkins Deployer Framework Plugin Description: A missing permission check in Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier allows attackers with Item/Read permission but without Deploy Now/Deploy permission to read deployment logs. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2205 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36892 State: PUBLISHED Published: 2022-07-27T14:23:09 Last Updated: 2024-08-03T10:14:29.366Z Vendors: Jenkins project Products: Jenkins rhnpush-plugin Plugin Description: Jenkins rhnpush-plugin Plugin 0.5.1 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2402 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36893 State: PUBLISHED Published: 2022-07-27T14:23:22 Last Updated: 2024-08-03T10:14:29.472Z Vendors: Jenkins project Products: Jenkins rpmsign-plugin Plugin Description: Jenkins rpmsign-plugin Plugin 0.5.0 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2403 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36894 State: PUBLISHED Published: 2022-07-27T14:23:33 Last Updated: 2024-08-03T10:14:29.353Z Vendors: Jenkins project Products: Jenkins CLIF Performance Testing Plugin Description: An arbitrary file write vulnerability in Jenkins CLIF Performance Testing Plugin 64.vc0d66de1dfb_f and earlier allows attackers with Overall/Read permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2413 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36895 State: PUBLISHED Published: 2022-07-27T14:23:45 Last Updated: 2024-08-03T10:14:29.435Z Vendors: Jenkins project Products: Jenkins Compuware Topaz Utilities Plugin Description: A missing permission check in Jenkins Compuware Topaz Utilities Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2619 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36896 State: PUBLISHED Published: 2022-07-27T14:23:58 Last Updated: 2024-08-03T10:14:29.495Z Vendors: Jenkins project Products: Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin Description: A missing permission check in Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2621 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36897 State: PUBLISHED Published: 2022-07-27T14:24:12 Last Updated: 2024-08-03T10:14:29.360Z Vendors: Jenkins project Products: Jenkins Compuware Xpediter Code Coverage Plugin Description: A missing permission check in Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2626 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36898 State: PUBLISHED Published: 2022-07-27T14:24:25 Last Updated: 2024-08-03T10:14:29.369Z Vendors: Jenkins project Products: Jenkins Compuware ISPW Operations Plugin Description: A missing permission check in Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2628 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36899 State: PUBLISHED Published: 2022-07-27T14:24:38 Last Updated: 2024-08-03T10:14:29.353Z Vendors: Jenkins project Products: Jenkins Compuware ISPW Operations Plugin Description: Jenkins Compuware ISPW Operations Plugin 1.0.8 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2629 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36900 State: PUBLISHED Published: 2022-07-27T14:24:50 Last Updated: 2024-08-03T10:14:29.482Z Vendors: Jenkins project Products: Jenkins Compuware zAdviser API Plugin Description: Jenkins Compuware zAdviser API Plugin 1.0.3 and earlier does not restrict execution of a controller/agent message to agents, allowing attackers able to control agent processes to retrieve Java system properties. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2630 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36901 State: PUBLISHED Published: 2022-07-27T14:25:00 Last Updated: 2024-08-03T10:14:29.477Z Vendors: Jenkins project Products: Jenkins HTTP Request Plugin Description: Jenkins HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2053 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36902 State: PUBLISHED Published: 2022-07-27T14:25:15 Last Updated: 2024-08-03T10:14:29.469Z Vendors: Jenkins project Products: Jenkins Dynamic Extended Choice Parameter Plugin Description: Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier does not escape several fields of Moded Extended Choice parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2682 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36903 State: PUBLISHED Published: 2022-07-27T14:25:27 Last Updated: 2024-08-03T10:14:29.471Z Vendors: Jenkins project Products: Jenkins Repository Connector Plugin Description: A missing permission check in Jenkins Repository Connector Plugin 2.2.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2665%20%281%29 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36904 State: PUBLISHED Published: 2022-07-27T14:25:41 Last Updated: 2024-08-03T10:14:29.354Z Vendors: Jenkins project Products: Jenkins Repository Connector Plugin Description: Jenkins Repository Connector Plugin 2.2.0 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2665%20%282%29 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36905 State: PUBLISHED Published: 2022-07-27T14:25:53 Last Updated: 2024-08-03T10:14:29.459Z Vendors: Jenkins project Products: Jenkins Maven Metadata Plugin for Jenkins CI server Plugin Description: Jenkins Maven Metadata Plugin for Jenkins CI server Plugin 2.2 and earlier does not perform URL validation for the Repository Base URL of List maven artifact versions parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2686 - http://www.openwall.com/lists/oss-security/2022/07
https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2686 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36906 State: PUBLISHED Published: 2022-07-27T14:26:07 Last Updated: 2024-08-03T10:14:29.451Z Vendors: Jenkins project Products: Jenkins OpenShift Deployer Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1375%20%281%29 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36907 State: PUBLISHED Published: 2022-07-27T14:26:18 Last Updated: 2024-08-03T10:14:29.441Z Vendors: Jenkins project Products: Jenkins OpenShift Deployer Plugin Description: A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1375%20%281%29 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36908 State: PUBLISHED Published: 2022-07-27T14:26:31 Last Updated: 2024-08-03T10:14:29.473Z Vendors: Jenkins project Products: Jenkins OpenShift Deployer Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1375%20%282%29 - http://www.openwall.com/lists/oss-security/
tps://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1375%20%282%29 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36909 State: PUBLISHED Published: 2022-07-27T14:26:41 Last Updated: 2024-08-03T10:14:29.446Z Vendors: Jenkins project Products: Jenkins OpenShift Deployer Plugin Description: A missing permission check in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1375%20%282%29 - http://www.openwall.com/lists/oss-sec
: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1375%20%282%29 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36910 State: PUBLISHED Published: 2022-07-27T14:26:54 Last Updated: 2024-08-03T10:14:29.472Z Vendors: Jenkins project Products: Jenkins Lucene-Search Plugin Description: Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to reindex the database and to obtain information about jobs otherwise inaccessible to them. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2048 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36911 State: PUBLISHED Published: 2022-07-27T14:27:06 Last Updated: 2024-08-03T10:14:29.478Z Vendors: Jenkins project Products: Jenkins Openstack Heat Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2105%20%281%29 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36912 State: PUBLISHED Published: 2022-07-27T14:27:18.000Z Last Updated: 2025-05-05T16:13:36.924Z Vendors: Jenkins project Products: Jenkins Openstack Heat Plugin Description: A missing permission check in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2105%20%281%29 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36913 State: PUBLISHED Published: 2022-07-27T14:27:28 Last Updated: 2024-08-03T10:14:29.458Z Vendors: Jenkins project Products: Jenkins Openstack Heat Plugin Description: Jenkins Openstack Heat Plugin 1.5 and earlier does not perform permission checks in methods implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2105%20%282%29 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36914 State: PUBLISHED Published: 2022-07-27T14:27:41 Last Updated: 2024-08-03T10:14:29.519Z Vendors: Jenkins project Products: Jenkins Files Found Trigger Plugin Description: Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2210 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36915 State: PUBLISHED Published: 2022-07-27T14:27:55 Last Updated: 2024-08-03T10:14:29.450Z Vendors: Jenkins project Products: Jenkins Android Signing Plugin Description: Jenkins Android Signing Plugin 2.2.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2404 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36916 State: PUBLISHED Published: 2022-07-27T14:28:08 Last Updated: 2024-08-03T10:14:29.496Z Vendors: Jenkins project Products: Jenkins Google Cloud Backup Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Google Cloud Backup Plugin 0.6 and earlier allows attackers to request a manual backup. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2656 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36917 State: PUBLISHED Published: 2022-07-27T14:28:21 Last Updated: 2024-08-03T10:14:29.467Z Vendors: Jenkins project Products: Jenkins Google Cloud Backup Plugin Description: A missing permission check in Jenkins Google Cloud Backup Plugin 0.6 and earlier allows attackers with Overall/Read permission to request a manual backup. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2656 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36918 State: PUBLISHED Published: 2022-07-27T14:28:34 Last Updated: 2024-08-03T10:14:29.494Z Vendors: Jenkins project Products: Jenkins Buckminster Plugin Description: Jenkins Buckminster Plugin 1.1.1 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2747 - http://www.openwall.com/lists/oss-security/2022/07/27/1
CVE ID: CVE-2022-36919 State: PUBLISHED Published: 2022-07-27T14:28:45 Last Updated: 2024-08-03T10:14:29.472Z Vendors: Jenkins project Products: Jenkins Coverity Plugin Description: A missing permission check in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2790%20%281%29 - http://www.openwall.com/lists/oss-security/2022/07/27/1