Junglewise Threat Intelligence

CVE-2022-27208: Arbitrary file read vulnerability in Jenkins kubernetes-cd Plugin

CVE-2022-27208 · Severity: low · CVSS 3.1 · Published 2022-03-16

Technologies: org.jenkins-ci.plugins:kubernetes-cd (Maven). Vendors: Maven.

Executive brief

Arbitrary file read vulnerability in Jenkins kubernetes-cd Plugin

Affected products

Maven org.jenkins-ci.plugins:kubernetes-cd

Related threats

CSRF vulnerability in Jenkins kubernetes-cd Plugin allow capturing credentials
Missing permission checks in Jenkins kubernetes-cd Plugin allow enumerating credentials IDs
CSRF vulnerability and missing permission checks in Jenkins kubernetes-cd Plugin allow capturing credentials