CVE-2022-34175

Summary

Jenkins 2.335 through 2.355 (both inclusive) allows attackers in some cases to bypass a protection mechanism, thereby directly accessing some view fragments containing sensitive information, bypassing any permission checks in the corresponding view.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins2.335 < unspecifiedaffected
Jenkins projectJenkinsunspecified <= 2.355affected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References