CVE-2022-34175

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-34175
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-34175.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-34175
Aliases
Published
2022-06-23T17:15:15.563Z
Modified
2026-04-12T03:45:18.694501Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Jenkins 2.335 through 2.355 (both inclusive) allows attackers in some cases to bypass a protection mechanism, thereby directly accessing some view fragments containing sensitive information, bypassing any permission checks in the corresponding view.

References

Affected packages

Git / github.com/jenkinsci/jenkins

Affected ranges

Type
GIT
Repo
https://github.com/jenkinsci/jenkins
Events
Introduced
cdb52fdcf6a2a30ae73bc33a2cfd477728e4b44c
Last affected
d43d0b51dd18bca980f7d384ec4a353a2a66b818
Database specific 
{
    "cpe": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.335"
        },
        {
            "last_affected": "2.355"
        }
    ],
    "source": "CPE_FIELD"
}

Affected versions

jenkins-2.*
jenkins-2.335
jenkins-2.336
jenkins-2.337
jenkins-2.338
jenkins-2.339
jenkins-2.340
jenkins-2.341
jenkins-2.342
jenkins-2.343
jenkins-2.344
jenkins-2.345
jenkins-2.346
jenkins-2.347
jenkins-2.348
jenkins-2.349
jenkins-2.350
jenkins-2.351
jenkins-2.352
jenkins-2.353
jenkins-2.354
jenkins-2.355

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-34175.json"