Skip to content
Sign in
Not rated

CVE-2022-27198 A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.

Affected products and versions

Product Affected versions Fixed in
Jenkins CloudBees AWS Credentials Plugin 189 earliest → 189.v3551d5642995 No fix stated
Jenkins CloudBees AWS Credentials Plugin 1.32 earliest → < 1.32.1 1.32.1
Jenkins CloudBees AWS Credentials Plugin 1.28 earliest → < 1.28.2 1.28.2

Other CVEs of Jenkins CloudBees AWS Credentials Plugin

The 3 CVEs of Jenkins CloudBees AWS Credentials Plugin →
CVE-2022-27199 A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers… Not rated CVE-2021-21625 Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for… Not rated
Track this CVE