6.5
Medium
CVE-2022-45383 An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with…
Description
An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Support Core Plugin | Versions not published |
References
- www.jenkins.io www.jenkins.io
- [oss-security] 20221115 Multiple vulnerabilities in Jenkins plugins www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Jenkins Support Core Plugin
The 5 CVEs of Jenkins Support Core Plugin →
CVE-2022-25187
Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle
Not rated
CVE-2021-21621
Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the "About user…
Not rated
CVE-2019-16539
A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission…
Not rated
CVE-2019-16540
A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read…
Not rated