Sign in

4.3 Medium

CVE-2022-45394 A missing permission check in Jenkins Delete log Plugin 1.0 and earlier allows attackers with Item/Read permission to…

Description

A missing permission check in Jenkins Delete log Plugin 1.0 and earlier allows attackers with Item/Read permission to delete build logs.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Delete log Plugin 1.0	earliest → 1.0	No fix stated

The 2 CVEs of Jenkins Delete log Plugin →

CVE-2022-45393 A cross-site request forgery (CSRF) vulnerability in Jenkins Delete log Plugin 1.0 and earlier allows attackers to… 3.5 Low

Do you use Jenkins Delete log Plugin?

Track this CVE Watch Jenkins Delete log Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-45394

Timeline

Published November 15, 2022
Last modified April 30, 2025

References

www.jenkins.io www.jenkins.io
[oss-security] 20221115 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE