medium4.3
CVE-2022-25195
Missing permission check in Jenkins autonomiq Plugin
Impact
A missing permission check in Jenkins autonomiq Plugin 1.15 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | io.jenkins.plugins:autonomiq | < 1.16 | 1.16 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Autonomiq | through 1.15 |