CVE-2022-45399

Summary

A missing permission check in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows attackers to delete recorded Jenkins Cluster Statistics.

Affected Software

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

• https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2938
• http://www.openwall.com/lists/oss-security/2022/11/15/4

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2938
• http://www.openwall.com/lists/oss-security/2022/11/15/4

• ←Previous
• Next→