AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-36892

MEDIUM · CVSS 4.3 EPSS 0.63%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-07-27 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-36892
Severity
MEDIUM
CVSS
4.3
EPSS
0.63%
Jenkins

Original NVD Description

Jenkins rhnpush-plugin Plugin 0.5.1 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents.