Skip to content
Sign in
Not rated

CVE-2022-34810 A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate…

Description

A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected products and versions

Product Affected versions Fixed in
Jenkins RQM Plugin 2.8 earliest → 2.8 No fix stated

Other CVEs of Jenkins RQM Plugin

The 3 CVEs of Jenkins RQM Plugin →
CVE-2022-41241 Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks 9.8 Critical CVE-2022-34809 Jenkins RQM Plugin 2.8 and earlier stores a password unencrypted in its global configuration file on the Jenkins… Not rated
Track this CVE