CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-29049

Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, allowing attackers with Job/Configure permission to create a promotion with an unsafe name.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.031

EPSS Ranking 86.1%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 4.0

References

Products affected by CVE-2022-29049

Jenkins » Promoted Builds » Version: N/A

cpe:2.3:a:jenkins:promoted_builds:-
Jenkins » Promoted Builds » Version: 1.0

cpe:2.3:a:jenkins:promoted_builds:1.0
Jenkins » Promoted Builds » Version: 1.1

cpe:2.3:a:jenkins:promoted_builds:1.1
Jenkins » Promoted Builds » Version: 1.10

cpe:2.3:a:jenkins:promoted_builds:1.10
Jenkins » Promoted Builds » Version: 1.11

cpe:2.3:a:jenkins:promoted_builds:1.11
Jenkins » Promoted Builds » Version: 1.2

cpe:2.3:a:jenkins:promoted_builds:1.2
Jenkins » Promoted Builds » Version: 1.3

cpe:2.3:a:jenkins:promoted_builds:1.3
Jenkins » Promoted Builds » Version: 1.4

cpe:2.3:a:jenkins:promoted_builds:1.4
Jenkins » Promoted Builds » Version: 1.5

cpe:2.3:a:jenkins:promoted_builds:1.5
Jenkins » Promoted Builds » Version: 1.6

cpe:2.3:a:jenkins:promoted_builds:1.6
Jenkins » Promoted Builds » Version: 1.7

cpe:2.3:a:jenkins:promoted_builds:1.7
Jenkins » Promoted Builds » Version: 1.8

cpe:2.3:a:jenkins:promoted_builds:1.8
Jenkins » Promoted Builds » Version: 1.9

cpe:2.3:a:jenkins:promoted_builds:1.9
Jenkins » Promoted Builds » Version: 2.0

cpe:2.3:a:jenkins:promoted_builds:2.0
Jenkins » Promoted Builds » Version: 2.1

cpe:2.3:a:jenkins:promoted_builds:2.1
Jenkins » Promoted Builds » Version: 2.10

cpe:2.3:a:jenkins:promoted_builds:2.10
Jenkins » Promoted Builds » Version: 2.11

cpe:2.3:a:jenkins:promoted_builds:2.11
Jenkins » Promoted Builds » Version: 2.12

cpe:2.3:a:jenkins:promoted_builds:2.12
Jenkins » Promoted Builds » Version: 2.13

cpe:2.3:a:jenkins:promoted_builds:2.13
Jenkins » Promoted Builds » Version: 2.14

cpe:2.3:a:jenkins:promoted_builds:2.14
Jenkins » Promoted Builds » Version: 2.15

cpe:2.3:a:jenkins:promoted_builds:2.15
Jenkins » Promoted Builds » Version: 2.16

cpe:2.3:a:jenkins:promoted_builds:2.16
Jenkins » Promoted Builds » Version: 2.17

cpe:2.3:a:jenkins:promoted_builds:2.17
Jenkins » Promoted Builds » Version: 2.18

cpe:2.3:a:jenkins:promoted_builds:2.18
Jenkins » Promoted Builds » Version: 2.19

cpe:2.3:a:jenkins:promoted_builds:2.19
Jenkins » Promoted Builds » Version: 2.2

cpe:2.3:a:jenkins:promoted_builds:2.2
Jenkins » Promoted Builds » Version: 2.20

cpe:2.3:a:jenkins:promoted_builds:2.20
Jenkins » Promoted Builds » Version: 2.21

cpe:2.3:a:jenkins:promoted_builds:2.21
Jenkins » Promoted Builds » Version: 2.22

cpe:2.3:a:jenkins:promoted_builds:2.22
Jenkins » Promoted Builds » Version: 2.23

cpe:2.3:a:jenkins:promoted_builds:2.23
Jenkins » Promoted Builds » Version: 2.23.1

cpe:2.3:a:jenkins:promoted_builds:2.23.1
Jenkins » Promoted Builds » Version: 2.24

cpe:2.3:a:jenkins:promoted_builds:2.24
Jenkins » Promoted Builds » Version: 2.24.1

cpe:2.3:a:jenkins:promoted_builds:2.24.1
Jenkins » Promoted Builds » Version: 2.25

cpe:2.3:a:jenkins:promoted_builds:2.25
Jenkins » Promoted Builds » Version: 2.26

cpe:2.3:a:jenkins:promoted_builds:2.26
Jenkins » Promoted Builds » Version: 2.27

cpe:2.3:a:jenkins:promoted_builds:2.27
Jenkins » Promoted Builds » Version: 2.28

cpe:2.3:a:jenkins:promoted_builds:2.28
Jenkins » Promoted Builds » Version: 2.28.1

cpe:2.3:a:jenkins:promoted_builds:2.28.1
Jenkins » Promoted Builds » Version: 2.29

cpe:2.3:a:jenkins:promoted_builds:2.29
Jenkins » Promoted Builds » Version: 2.29.1

cpe:2.3:a:jenkins:promoted_builds:2.29.1
Jenkins » Promoted Builds » Version: 2.3

cpe:2.3:a:jenkins:promoted_builds:2.3
Jenkins » Promoted Builds » Version: 2.3.1

cpe:2.3:a:jenkins:promoted_builds:2.3.1
Jenkins » Promoted Builds » Version: 2.30

cpe:2.3:a:jenkins:promoted_builds:2.30
Jenkins » Promoted Builds » Version: 2.31

cpe:2.3:a:jenkins:promoted_builds:2.31
Jenkins » Promoted Builds » Version: 2.31.1

cpe:2.3:a:jenkins:promoted_builds:2.31.1
Jenkins » Promoted Builds » Version: 2.4

cpe:2.3:a:jenkins:promoted_builds:2.4
Jenkins » Promoted Builds » Version: 2.5

cpe:2.3:a:jenkins:promoted_builds:2.5
Jenkins » Promoted Builds » Version: 2.6

cpe:2.3:a:jenkins:promoted_builds:2.6
Jenkins » Promoted Builds » Version: 2.6.1

cpe:2.3:a:jenkins:promoted_builds:2.6.1
Jenkins » Promoted Builds » Version: 2.6.2

cpe:2.3:a:jenkins:promoted_builds:2.6.2
Jenkins » Promoted Builds » Version: 2.7

cpe:2.3:a:jenkins:promoted_builds:2.7
Jenkins » Promoted Builds » Version: 2.8

cpe:2.3:a:jenkins:promoted_builds:2.8
Jenkins » Promoted Builds » Version: 2.9

cpe:2.3:a:jenkins:promoted_builds:2.9
Jenkins » Promoted Builds » Version: 3.0

cpe:2.3:a:jenkins:promoted_builds:3.0
Jenkins » Promoted Builds » Version: 3.1

cpe:2.3:a:jenkins:promoted_builds:3.1
Jenkins » Promoted Builds » Version: 3.10

cpe:2.3:a:jenkins:promoted_builds:3.10
Jenkins » Promoted Builds » Version: 3.2

cpe:2.3:a:jenkins:promoted_builds:3.2
Jenkins » Promoted Builds » Version: 3.3

cpe:2.3:a:jenkins:promoted_builds:3.3
Jenkins » Promoted Builds » Version: 3.4

cpe:2.3:a:jenkins:promoted_builds:3.4
Jenkins » Promoted Builds » Version: 3.5

cpe:2.3:a:jenkins:promoted_builds:3.5
Jenkins » Promoted Builds » Version: 3.5.1

cpe:2.3:a:jenkins:promoted_builds:3.5.1
Jenkins » Promoted Builds » Version: 3.6

cpe:2.3:a:jenkins:promoted_builds:3.6
Jenkins » Promoted Builds » Version: 3.7

cpe:2.3:a:jenkins:promoted_builds:3.7
Jenkins » Promoted Builds » Version: 3.8

cpe:2.3:a:jenkins:promoted_builds:3.8
Jenkins » Promoted Builds » Version: 3.9

cpe:2.3:a:jenkins:promoted_builds:3.9
Jenkins » Promoted Builds » Version: 3.9.1

cpe:2.3:a:jenkins:promoted_builds:3.9.1
Jenkins » Promoted Builds » Version: 867.v7c3a_b_83a_eb_79

cpe:2.3:a:jenkins:promoted_builds:867.v7c3a_b_83a_eb_79
Jenkins » Promoted Builds » Version: 873.v6149db_d64130

cpe:2.3:a:jenkins:promoted_builds:873.v6149db_d64130

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-29049

Products

Pricing

Contact Us