Sign in

4.3 Medium

CVE-2022-45399 A missing permission check in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows attackers to delete recorded…

Description

A missing permission check in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows attackers to delete recorded Jenkins Cluster Statistics.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Cluster Statistics Plugin 0.4	earliest → 0.4.6	No fix stated

The 2 CVEs of Jenkins Cluster Statistics Plugin →

CVE-2022-45398 A cross-site request forgery (CSRF) vulnerability in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows… 4.3 Medium

Do you use Jenkins Cluster Statistics Plugin?

Track this CVE Watch Jenkins Cluster Statistics Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-45399

Timeline

Published November 15, 2022
Last modified April 30, 2025

References

www.jenkins.io www.jenkins.io
[oss-security] 20221115 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE