CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2022-45383
Medium (6.5) in jenkins support core. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:support-core 1206.1208.v9b_7a_1d48db_0f.
An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
- CWE
- CWE-863
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:support_core
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-w2j3-pq63-339w | Maven | org.jenkins-ci.plugins:support-core | <1206.1208.v9b_7a_1d48db_0f | 1206.1208.v9b_7a_1d48db_0f |