CVE-2022-41242 in extreme-feedback Plugin

摘要

由 MITRE • 2022-09-21

A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 预定: 2022-09-21
• 披露: 2022-09-21
• 管理: 已接受
• 条目: VDB-209269
• CPE: 准备好
• CWE: CWE-862 (已确认)
• CVSS: 5.4 (NVD)
• EPSS: 0.00495
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-41242
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-41242
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-41242/