CVE-2022-25195: Medium severity jenkins vulnerability
Published Feb 15, 2022
·Updated
A missing permission check in Jenkins autonomiq Plugin 1.15 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
Affected Software
1 affected component
Jenkins Autonomiq Jenkins<=1.15
Remediation
Event History
Feb 15, 2022
CVE Published
via MITRE·04:11 PM
Data Sourced
via MITRE·04:11 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-25195?
CVE-2022-25195 is classified as a medium severity vulnerability.
2
How do I fix CVE-2022-25195?
To fix CVE-2022-25195, update the Jenkins Autonomiq Plugin to version 1.16 or later.
3
What are the implications of CVE-2022-25195?
CVE-2022-25195 allows attackers with Overall/Read permission to connect to attacker-specified URLs, potentially leading to unauthorized access.
4
Who is affected by CVE-2022-25195?
Users of Jenkins Autonomiq Plugin version 1.15 and earlier are affected by CVE-2022-25195.
5
What could an attacker do with CVE-2022-25195?
An attacker could leverage CVE-2022-25195 to connect to arbitrary URLs using attacker-controlled credentials.