Vulnerabilities > CVE-2022-34785 - Incorrect Authorization vulnerability in Jenkins Build-Metrics
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |