← Database

CVE-2022-34785

MEDIUM CVSS: 4.3 Published: 2022-06-30 Modified: 2026-06-17

Description

Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them.

Affected Platforms

Jenkins Build-Metrics

Weakness Type

CWE-863

References