Cloudbees Sårbarheter

Tidslinje

Typ

Produkt

CloudBees Jenkins68
CloudBees Docker Hub Registry Notification Plugin2
CloudBees AWS Credentials Plugin2
CloudBees Jenkins Operations Center2

Åtgärd

Official Fix66
Temporary Fix0
Workaround0
Unavailable0
Not Defined8

Utnyttjbarhet

High2
Functional0
Proof-of-Concept2
Unproven0
Not Defined70

Åtkomstvektor

Not Defined0
Physical0
Local0
Adjacent2
Network72

Autentisering

Not Defined0
High0
Low14
None60

Användarinteraktion

Not Defined0
Required52
None22

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤522
≤616
≤718
≤812
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤522
≤628
≤712
≤86
≤92
≤100

VulDB

≤10
≤20
≤30
≤44
≤522
≤610
≤716
≤818
≤94
≤100

NVD

≤10
≤20
≤30
≤40
≤58
≤62
≤76
≤84
≤94
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k18
<2k40
<5k16
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja idag

<1k72
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Products (6): AWS Credentials Plugin (3), Directory (1), Docker Hub Registry Notification Plugin (1), Enterprise (1), Jenkins (67), Jenkins Operations Center (1)

Link to Vendor Website: https://www.cloudbees.com/

PubliceradBaseTempSårbarhetProdUtnRemEPSSCTICVE
15/11/20226.96.9CloudBees Docker Hub Registry Notification Plugin privilegier eskaleringVirtualization SoftwareNot DefinedNot Defined0.000640.00CVE-2022-45385
16/03/20224.34.3CloudBees AWS Credentials Plugin förfalskning på begäran över webbplatsenCloud SoftwareNot DefinedNot Defined0.000680.00CVE-2022-27198
16/03/20225.55.5CloudBees AWS Credentials Plugin privilegier eskaleringJenkins PluginNot DefinedNot Defined0.000540.00CVE-2022-27199
18/03/20214.94.9CloudBees AWS Credentials Plugin privilegier eskaleringJenkins PluginNot DefinedNot Defined0.000540.00CVE-2021-21625
19/04/20197.57.5CloudBees Jenkins Operations Center Configuration Page Credentials privilegier eskaleringContinuous Integration SoftwareNot DefinedNot Defined0.005020.04CVE-2019-11350
17/05/20165.95.7CloudBees Jenkins API URL xml informationsgivningContinuous Integration SoftwareNot DefinedOfficial Fix0.001520.00CVE-2016-3727
17/05/20167.47.2CloudBees Jenkins RedirectContinuous Integration SoftwareNot DefinedOfficial Fix0.002680.02CVE-2016-3726
17/05/20165.95.7CloudBees Jenkins Updater privilegier eskaleringContinuous Integration SoftwareNot DefinedOfficial Fix0.001550.00CVE-2016-3725
17/05/20167.06.8CloudBees Jenkins Job Configuration Password informationsgivningContinuous Integration SoftwareNot DefinedOfficial Fix0.001520.00CVE-2016-3724
17/05/20165.95.7CloudBees Jenkins XML/JSON API Endpoint informationsgivningContinuous Integration SoftwareNot DefinedOfficial Fix0.001520.00CVE-2016-3723

64 fler poster visas inte

Might our Artificial Intelligence support you?

Check our Alexa App!