CSRF vulnerability in Jenkins kubernetes-cd Plugin allow capturing credentials

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-27210 · ADVISORY
• jenkinsci/kubernetes-cd-plugin · PACKAGE
• jenkins.io/security/advisory/2022-03-15 · WEB
• openwall.com/lists/oss-security/2022/03/15/2 · WEB

org.jenkins-ci.plugins:kubernetes-cd のその他の脆弱性

• CVE-2022-27211中 6.5A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to…
• CVE-2022-27209中 6.5A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to…
• CVE-2022-27208中 6.5Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows users with Credentials/Create permission to read arbitrary files on the…