Vulnerability Details CVE-2022-23116
Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2022-23116
-
cpe:2.3:a:jenkins:conjur_secrets:1.0.2
-
cpe:2.3:a:jenkins:conjur_secrets:1.0.4
-
cpe:2.3:a:jenkins:conjur_secrets:1.0.5
-
cpe:2.3:a:jenkins:conjur_secrets:1.0.6
-
cpe:2.3:a:jenkins:conjur_secrets:1.0.7
-
cpe:2.3:a:jenkins:conjur_secrets:1.0.8
-
cpe:2.3:a:jenkins:conjur_secrets:1.0.9