medium5.4
CVE-2022-28134
Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Rea…
Impact
Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Bitbucket Server Integration | through 3.1.0 |