CVE-2022-34180

Jenkins Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for…

published June 22, 2022

CVSS
—
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

Jenkins Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for "unprotected" status badge access, allowing attackers without any permissions to obtain the build status badge icon for any attacker-specified job and/or build.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01260 · 69.4th percentile
Published
2022-06-22T14:41Z
EPSS history
Timeline
  • 22 JUN 14:41Z
    Jenkins Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for…
    cvelistv5