1. CVE-Search
  2. CVE-2022-30948
ID CVE-2022-30948
Summary Jenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents.
References
Vulnerable Configurations
  • cpe:2.3:a:jenkins:mercurial:1.0:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.0:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.2:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.2:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.3:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.3:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.4:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.4:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.5:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.5:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.6:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.6:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.7:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.7:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.8:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.8:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.9:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.9:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.10:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.10:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.11:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.11:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.12:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.12:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.13:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.13:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.14:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.14:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.15:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.15:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.16:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.16:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.17:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.17:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.18:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.18:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.19:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.19:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.20:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.20:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.21:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.21:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.22:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.22:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.23:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.23:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.24:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.24:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.25:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.25:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.26:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.26:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.27:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.27:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.28:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.28:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.29:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.29:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.30:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.30:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.31:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.31:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.32:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.32:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.33:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.33:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.34:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.34:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.35:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.35:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.36:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.36:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.37:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.37:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.38:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.38:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.39:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.39:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.40:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.40:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.41:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.41:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.42:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.42:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.43:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.43:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.44:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.44:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.45:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.45:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.46:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.46:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.47:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.47:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.48:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.48:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.49:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.49:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.50:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.50:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.50.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.50.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.51:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.51:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.52:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.52:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.53:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.53:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.54:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.54:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.55:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.55:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.56:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.56:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.57:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.57:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.58:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.58:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.59:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.59:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.60:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.60:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:1.61:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:1.61:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:2.0:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:2.0:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:2.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:2.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:2.2:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:2.2:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:2.3:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:2.3:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:2.4:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:2.4:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:2.5:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:2.5:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:2.6:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:2.6:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:2.11:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:2.11:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:mercurial:2.16:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:mercurial:2.16:*:*:*:*:jenkins:*:*
CVSS
Base: 5.0 (as of 03-11-2023 - 18:19)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
Last major update 03-11-2023 - 18:19
Published 17-05-2022 - 15:15
Last modified 03-11-2023 - 18:19
Back to Top