Security Advisory

CVE-2022-27215

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-15 16:46:07
Last updated 2024-08-03 05:25:32
Assigner jenkins
CVSS score not scored
State PUBLISHED

Description

A missing permission check in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.