CVE-2022-41252: Medium severity Jenkins Cons3rt Jenkins vulnerability
Published Sep 21, 2022
·Updated
Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.
Affected Software
1 affected component
Jenkins Cons3rt Jenkins<=1.0.0
Event History
Sep 21, 2022
CVE Published
via MITRE·03:46 PM
Data Sourced
via MITRE·03:46 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-41252?
CVE-2022-41252 is classified as a medium severity vulnerability due to potential exposure of sensitive credentials.
2
How do I fix CVE-2022-41252?
To fix CVE-2022-41252, upgrade the Jenkins CONS3RT Plugin to version 1.0.1 or later.
3
Who is affected by CVE-2022-41252?
CVE-2022-41252 affects users of Jenkins CONS3RT Plugin version 1.0.0 and earlier.
4
What type of vulnerability is CVE-2022-41252?
CVE-2022-41252 is a permission-related vulnerability that allows credential enumeration.
5
What impact does CVE-2022-41252 have on Jenkins?
CVE-2022-41252 allows users with Overall/Read permission to enumerate credentials IDs, potentially compromising sensitive information.