CVE-2022-27209: Medium severity kubernetes continuous deploy vulnerability
A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-27209.
What is the title of this vulnerability?
The title of this vulnerability is 'A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows a…'
What is the description of this vulnerability?
The description of this vulnerability is 'A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.'
What is the affected software?
The affected software is Kubernetes Continuous Deploy Plugin version up to and including 2.3.1.
What is the severity of this vulnerability?
The severity of this vulnerability is medium with a CVSS score of 6.5.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability in the following references: - [Openwall](http://www.openwall.com/lists/oss-security/2022/03/15/2) - [Jenkins Security Advisory](https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2636)