CVE-2022-34181
CVE-2022-34181
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
22 jun 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Jenkins xUnit Plugin 3.0.8 and earlier implements an agent-to-controller message that creates a user-specified directory if it doesn't exist, and parsing files inside it as test results, allowing attackers able to control agent processes to create an arbitrary directory on the Jenkins controller or to obtain test results from existing files in an attacker-specified directory.
Productos afectados
Jenkins project · Jenkins xUnit Plugin¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →