CVE-2022-36910

Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read…

published July 27, 2022

CVSS
—
EPSS
1%
Percentile
43.3
In the wild
Unconfirmed
What it is

Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to reindex the database and to obtain information about jobs otherwise inaccessible to them.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00519 · 43.3th percentile
Published
2022-07-27T14:26Z
EPSS history
Timeline
  • 27 JUL 14:26Z
    Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read…
    cvelistv5