1. CVE-Search
  2. CVE-2022-25181
ID CVE-2022-25181
Summary A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.
References
Vulnerable Configurations
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:-:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:-:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.0:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.0:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.2:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.2:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.3:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.3:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.4:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.4:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.5:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.5:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.6:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.6:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.7:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.7:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.8:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.8:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.9:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.9:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.10:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.10:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.11:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.11:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.12:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.12:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.12.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.12.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.13:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.13:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.13.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.13.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.14:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.14:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.15:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.15:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.16:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.16:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.17:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.17:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.18:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.18:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.18.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.18.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.19:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.19:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.21.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:2.21.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:544.vff04fa68714d:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:544.vff04fa68714d:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:545.v7b28cce323cf:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:545.v7b28cce323cf:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:548.v9085a486966a:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:548.v9085a486966a:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:552.554.vdba55efb9e88:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:552.554.vdba55efb9e88:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:552.vd9cc05b8a2e1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:pipeline\:shared_groovy_libraries:552.vd9cc05b8a2e1:*:*:*:*:jenkins:*:*
CVSS
Base: 6.5 (as of 25-10-2023 - 18:16)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:P/A:P
Last major update 25-10-2023 - 18:16
Published 15-02-2022 - 17:15
Last modified 25-10-2023 - 18:16
Back to Top