CVE-2022-34175
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-34175
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-34175.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-34175
- Aliases
- Published
- 2022-06-23T17:15:15Z
- Modified
- 2024-09-03T04:17:26.486210Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Jenkins 2.335 through 2.355 (both inclusive) allows attackers in some cases to bypass a protection mechanism, thereby directly accessing some view fragments containing sensitive information, bypassing any permission checks in the corresponding view.
- References
Affected packages
Git / github.com/jenkinsci/jenkins
Affected versions
jenkins-2.*
jenkins-2.335
jenkins-2.336
jenkins-2.337
jenkins-2.338
jenkins-2.339
jenkins-2.340
jenkins-2.341
jenkins-2.342
jenkins-2.343
jenkins-2.344
jenkins-2.345
jenkins-2.346
jenkins-2.347
jenkins-2.348
jenkins-2.349
jenkins-2.350
jenkins-2.351
jenkins-2.352
jenkins-2.353
jenkins-2.354
jenkins-2.355