CVE-2022-34796
First published: Thu Jun 30 2022(Updated: )
A missing permission check in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Credit: jenkinsci-cert@googlegroups.com jenkinsci-cert@googlegroups.com jenkinsci-cert@googlegroups.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Jenkins Deployment Dashboard | <=1.0.10 | |
| maven/org.jenkins-ci.plugins:ec2-deployment-dashboard | <=1.0.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Jenkins Deployment Dashboard Plugin?
The vulnerability ID for Jenkins Deployment Dashboard Plugin is CVE-2022-34796.
What is the severity level of CVE-2022-34796?
CVE-2022-34796 has a severity level of medium with a value of 4.3.
How does CVE-2022-34796 affect Jenkins Deployment Dashboard Plugin?
CVE-2022-34796 allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
What is the affected version of Jenkins Deployment Dashboard Plugin?
Jenkins Deployment Dashboard Plugin versions up to and including 1.0.10 are affected.
How can I fix CVE-2022-34796 in Jenkins Deployment Dashboard Plugin?
To fix CVE-2022-34796 in Jenkins Deployment Dashboard Plugin, upgrade to a version beyond 1.0.10.
- collector/nvd-index
- collector/github-advisory-latest
- alias/GHSA-5mxg-p5qh-2gch
- alias/CVE-2022-34796
- collector/nvd-cve
- collector/github-advisory
- collector/nvd-api
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/softwarecombine
- agent/last-modified-date
- agent/event
- agent/description
- agent/first-publish-date
- agent/tags
- agent/trending
- vendor/jenkins
- canonical/jenkins deployment dashboard
- version/jenkins deployment dashboard/1.0.10
- package-manager/maven