CVE-2022-34175
Assigner: jenkins
Published: 2022-06-22T14:40:57
State: PUBLISHED
affected: product: Jenkins
vendor: Jenkins project
versions: lessThan: unspecified
status: affected
version: 2.335
versionType: custom
lessThanOrEqual: 2.355
status: affected
version: unspecified
versionType: custom
descriptions: value: Jenkins 2.335 through 2.355 (both inclusive) allows attackers in some cases to bypass a protection mechanism, thereby directly accessing some view fragments containing sensitive information, bypassing any permission checks in the corresponding view.