CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-27198

A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.7%

CVSS Severity

CVSS v3 Score 8.0

CVSS v2 Score 6.0

References

Products affected by CVE-2022-27198

Jenkins » Cloudbees Aws Credentials » Version: N/A

cpe:2.3:a:jenkins:cloudbees_aws_credentials:-
Jenkins » Cloudbees Aws Credentials » Version: 1.10

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.10
Jenkins » Cloudbees Aws Credentials » Version: 1.11

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.11
Jenkins » Cloudbees Aws Credentials » Version: 1.11.1

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.11.1
Jenkins » Cloudbees Aws Credentials » Version: 1.12

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.12
Jenkins » Cloudbees Aws Credentials » Version: 1.13

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.13
Jenkins » Cloudbees Aws Credentials » Version: 1.14

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.14
Jenkins » Cloudbees Aws Credentials » Version: 1.15

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.15
Jenkins » Cloudbees Aws Credentials » Version: 1.16

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.16
Jenkins » Cloudbees Aws Credentials » Version: 1.17

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.17
Jenkins » Cloudbees Aws Credentials » Version: 1.18

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.18
Jenkins » Cloudbees Aws Credentials » Version: 1.19

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.19
Jenkins » Cloudbees Aws Credentials » Version: 1.20

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.20
Jenkins » Cloudbees Aws Credentials » Version: 1.21

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.21
Jenkins » Cloudbees Aws Credentials » Version: 1.22

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.22
Jenkins » Cloudbees Aws Credentials » Version: 1.23

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.23
Jenkins » Cloudbees Aws Credentials » Version: 1.24

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.24
Jenkins » Cloudbees Aws Credentials » Version: 1.25

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.25
Jenkins » Cloudbees Aws Credentials » Version: 1.26

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.26
Jenkins » Cloudbees Aws Credentials » Version: 1.27

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.27
Jenkins » Cloudbees Aws Credentials » Version: 1.28

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.28
Jenkins » Cloudbees Aws Credentials » Version: 1.28.1

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.28.1
Jenkins » Cloudbees Aws Credentials » Version: 1.28.2

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.28.2
Jenkins » Cloudbees Aws Credentials » Version: 1.29

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.29
Jenkins » Cloudbees Aws Credentials » Version: 1.30

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.30
Jenkins » Cloudbees Aws Credentials » Version: 1.31

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.31
Jenkins » Cloudbees Aws Credentials » Version: 1.31.1

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.31.1
Jenkins » Cloudbees Aws Credentials » Version: 1.32

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.32
Jenkins » Cloudbees Aws Credentials » Version: 1.32.1

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.32.1
Jenkins » Cloudbees Aws Credentials » Version: 1.33

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.33
Jenkins » Cloudbees Aws Credentials » Version: 1.8

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.8
Jenkins » Cloudbees Aws Credentials » Version: 1.9

cpe:2.3:a:jenkins:cloudbees_aws_credentials:1.9
Jenkins » Cloudbees Aws Credentials » Version: 189.v3551d5642995

cpe:2.3:a:jenkins:cloudbees_aws_credentials:189.v3551d5642995

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-27198

Products

Pricing

Contact Us