Em resumo
- CVE-2022-28134 é uma vulnerabilidade MÉDIO (CVSS 5.4) que afeta io.jenkins.plugins:atlassian-bitbucket-server-integration, bitbucket server integration (jenkins).
- Chance de exploração nos próximos 30 dias (EPSS): 0.67%, maior que 52.0% das vulnerabilidades.
- Correção: atualize para 3.2.0 ou posterior.
Description
Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers.
NVD description
Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers.
Mais vulnerabilidades de io.jenkins.plugins:atlassian-bitbucket-server-integration
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free