Missing Permission Check in Jenkins Deployment Dashboard Plugin Affects User Credentials Enumeration

CVE-2022-34796

What is CVE-2022-34796?

The Jenkins Deployment Dashboard Plugin has a vulnerability where a missing permission check permits users with Overall/Read access to enumerate the IDs of stored credentials in Jenkins. This flaw poses a security risk, allowing unauthorized access to sensitive credential information, potentially leading to further exploitation. Users of versions 1.0.10 and earlier should assess their systems for this vulnerability and apply necessary patches as outlined in the official Jenkins security advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References