Vulnerabilities > CVE-2022-27195 - Unspecified vulnerability in Jenkins Parameterized Trigger

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

jenkins

NVD

Published: 2022-03-15

Updated: 2023-11-22

Summary

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their `build.xml` files. These values are stored unencrypted and can be viewed by users with access to the Jenkins controller file system.

Vulnerable Configurations

Part	Description	Count
Application	Jenkins Jenkins Parameterized Trigger 1.0 Jenkins Parameterized Trigger 1.1 Jenkins Parameterized Trigger 1.2 Jenkins Parameterized Trigger 1.3 Jenkins Parameterized Trigger 1.4 Jenkins Parameterized Trigger 1.5 Jenkins Parameterized Trigger 1.6 Jenkins Parameterized Trigger 2.0 Jenkins Parameterized Trigger 2.1 Jenkins Parameterized Trigger 2.2 Jenkins Parameterized Trigger 2.3 Jenkins Parameterized Trigger 2.4 Jenkins Parameterized Trigger 2.5 Jenkins Parameterized Trigger 2.6 Jenkins Parameterized Trigger 2.7 Jenkins Parameterized Trigger 2.8 Jenkins Parameterized Trigger 2.9 Jenkins Parameterized Trigger 2.10 Jenkins Parameterized Trigger 2.11 Jenkins Parameterized Trigger 2.12 Jenkins Parameterized Trigger 2.13 Jenkins Parameterized Trigger 2.14 Jenkins Parameterized Trigger 2.15 Jenkins Parameterized Trigger 2.16 Jenkins Parameterized Trigger 2.17 Jenkins Parameterized Trigger 2.18 Jenkins Parameterized Trigger 2.19 Jenkins Parameterized Trigger 2.20 Jenkins Parameterized Trigger 2.21 Jenkins Parameterized Trigger 2.22 Jenkins Parameterized Trigger 2.23 Jenkins Parameterized Trigger 2.24 Jenkins Parameterized Trigger 2.25 Jenkins Parameterized Trigger 2.26 Jenkins Parameterized Trigger 2.27 Jenkins Parameterized Trigger 2.28 Jenkins Parameterized Trigger 2.29 Jenkins Parameterized Trigger 2.30 Jenkins Parameterized Trigger 2.31 Jenkins Parameterized Trigger 2.32 Jenkins Parameterized Trigger 2.33 Jenkins Parameterized Trigger 2.34 Jenkins Parameterized Trigger 2.35 Jenkins Parameterized Trigger 2.35.1 Jenkins Parameterized Trigger 2.35.2 Jenkins Parameterized Trigger 2.36 Jenkins Parameterized Trigger 2.37 Jenkins Parameterized Trigger 2.38 Jenkins Parameterized Trigger 2.39 Jenkins Parameterized Trigger 2.40 Jenkins Parameterized Trigger 2.40.1 Jenkins Parameterized Trigger 2.41 Jenkins Parameterized Trigger 2.41.1 Jenkins Parameterized Trigger 2.42 Jenkins Parameterized Trigger 2.43	55

Summary

Vulnerable Configurations

References