Vulnerabilities > CVE-2022-45388 - Unspecified vulnerability in Jenkins Config Rotator 2.0.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Jenkins Config Rotator Plugin 2.0.1 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing unauthenticated attackers to read arbitrary files with '.xml' extension on the Jenkins controller file system.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |