CVE-2022-34201

CWE-862 — Missing Authorization5 documents5 sources

Severity

6.5MEDIUM

EPSS

0.4%

top 39.29%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Jenkins Project Jenkins Convertigo Mobile Platform Plugin Jenkins Convertigo Mobile Platform

Timeline

PublishedJun 23

Latest updateJun 24

Description

A missing permission check in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5jenkins_project/jenkins_convertigo_mobile_platform_pluginunspecified — 1.1

▶Mavencom.convertigo.jenkins.plugins:convertigo-mobile-platform1.1

▶NVDjenkins/convertigo_mobile_platform1.1

🔴Vulnerability Details

OSV

Missing permission check in Jenkins Convertigo Mobile Platform Plugin↗2022-06-24

▶

GHSA

Missing permission check in Jenkins Convertigo Mobile Platform Plugin↗2022-06-24

▶

CVEList

CVE-2022-34201: A missing permission check in Jenkins Convertigo Mobile Platform Plugin 1↗2022-06-22

▶

📋Vendor Advisories

Jenkins

Jenkins Security Advisory 2022-06-22↗2022-06-22

▶