5.4 Medium

CVE-2022-41242 A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read…

Description

A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins extreme-feedback Plugin 1.7	earliest → 1.7	No fix stated

Do you use Jenkins extreme-feedback Plugin?

Track this CVE Watch Jenkins extreme-feedback Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-41242

Timeline

Published September 21, 2022
Last modified May 28, 2025

References

www.jenkins.io www.jenkins.io

Track this CVE