CVE-2022-34175 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-34175 PUBLISHED

Jenkins 2.335 through 2.355 (both inclusive) allows attackers in some cases to bypass a protection mechanism, thereby directly accessing some view fragments containing sensitive information, bypassing any permission checks in the corresponding view.

EPSS 4.14% · 88.6th percentile

Risk Scores

EPSS Score

4.14%

88.6th percentile

Affected Products

Vendor	Product	Versions
Bitnami	jenkins	2.335.0
Bitnami	jenkins	2.335.0

Timeline

Jun 22, 2022 CVE Published
Jun 23, 2022 EPSS Score
Aug 10, 2022 EPSS Score
Sep 26, 2022 EPSS Score
Dec 30, 2022 EPSS Score
Feb 15, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 3, 2023 EPSS Score
Jul 7, 2023 EPSS Score
Aug 23, 2023 EPSS Score
Oct 9, 2023 EPSS Score
Nov 25, 2023 EPSS Score

References

Open in Interactive Console →