4.3 Medium

CVE-2022-45390 A missing permission check in Jenkins loader.io Plugin 1.0.1 and earlier allows attackers with Overall/Read permission…

Description

A missing permission check in Jenkins loader.io Plugin 1.0.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins loader.io Plugin 1.0	earliest → 1.0.1	No fix stated

Do you use Jenkins loader.io Plugin?

Track this CVE Watch Jenkins loader.io Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-45390

Timeline

Published November 15, 2022
Last modified April 30, 2025

References

www.jenkins.io www.jenkins.io
[oss-security] 20221115 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE