ID CVE-2022-45383
Summary An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission.
References
Vulnerable Configurations
  • cpe:2.3:a:jenkins:support_core:-:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:-:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:1.0:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:1.0:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:1.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:1.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:1.2:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:1.2:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:1.3:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:1.3:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:1.4:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:1.4:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:1.5:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:1.5:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:1.6:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:1.6:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:1.7:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:1.7:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:1.8:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:1.8:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.0:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.0:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.2:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.2:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.3:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.3:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.4:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.4:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.5:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.5:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.6:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.6:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.7:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.7:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.8:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.8:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.9:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.9:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.10:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.10:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.11:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.11:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.12:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.12:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.13:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.13:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.14:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.14:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.15:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.15:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.16:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.16:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.17:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.17:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.18:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.18:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.19:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.19:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.20:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.20:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.21:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.21:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.22:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.22:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.23:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.23:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.24:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.24:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.25:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.25:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.27:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.27:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.28:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.28:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.29:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.29:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.30:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.30:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.31:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.31:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.32:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.32:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.33:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.33:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.34:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.34:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.35:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.35:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.36:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.36:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.37:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.37:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.38:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.38:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.39:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.39:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.40:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.40:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.41:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.41:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.42:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.42:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.43:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.43:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.44:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.44:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.45:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.45:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.45.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.45.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.46:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.46:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.47:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.47:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.48:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.48:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.49:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.49:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.50:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.50:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.51:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.51:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.52:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.52:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.53:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.53:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.54:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.54:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.55:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.55:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.56:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.56:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.56.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.56.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.57:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.57:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.58:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.58:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.59:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.59:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.60:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.60:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.61:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.61:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.62:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.62:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.62.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.62.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.63:-:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.63:-:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.63:alpha:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.63:alpha:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.64:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.64:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.68.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.68.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.70.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.70.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.72:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.72:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.72.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.72.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.74:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.74:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.75:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.75:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.76:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.76:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.76.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.76.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.77:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.77:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.78:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.78:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.79:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.79:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.79.1:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.79.1:*:*:*:*:jenkins:*:*
  • cpe:2.3:a:jenkins:support_core:2.80:*:*:*:*:jenkins:*:*
    cpe:2.3:a:jenkins:support_core:2.80:*:*:*:*:jenkins:*:*
CVSS
Base: None
Impact:
Exploitability:
CWE CWE-863
CAPEC
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 25-10-2023 - 18:17
Published 15-11-2022 - 20:15
Last modified 25-10-2023 - 18:17
Back to Top