CVEvulnerability
CVE-2022-30951
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-05-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-862
Description
Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access control, potentially allowing users to start processes even if they're not allowed to log in.
Affected configurations
• jenkins wmi windows agents (< 1.8.1)
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- http://www.openwall.com/lists/oss-security/2022/05/17/8 Mailing List, Third Party Advisory
- https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2604 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2022/05/17/8 Mailing List, Third Party Advisory
- https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2604 Vendor Advisory