CVE-2022-34810: Medium severity ibm rational quality manager (rqm) vulnerability
Published Jun 30, 2022
·Updated
A missing check in Jenkins RQM Plugin 2.8 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Affected Software
1 affected component
Jenkins Rqm Jenkins<=2.8
Event History
Jun 30, 2022
CVE Published
via MITRE·05:48 PM
Data Sourced
via MITRE·05:48 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-34810?
CVE-2022-34810 has a medium severity level due to the risk of credential enumeration.
2
How do I fix CVE-2022-34810?
To fix CVE-2022-34810, update the Jenkins RQM Plugin to version 2.9 or later.
3
What is the impact of CVE-2022-34810?
CVE-2022-34810 allows attackers with Overall/Read permissions to enumerate credential IDs, potentially revealing sensitive information.
4
Which versions of Jenkins are affected by CVE-2022-34810?
Jenkins RQM Plugin versions 2.8 and earlier are affected by CVE-2022-34810.
5
Who is at risk for CVE-2022-34810?
Users of Jenkins with the RQM Plugin prior to version 2.9 are at risk for CVE-2022-34810.