CVE-2022-34180 | BDVDB-2026-178772 Detail

Jenkins projectJenkins Embeddable Build Status Plugin

Description#

Jenkins Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for "unprotected" status badge access, allowing attackers without any permissions to obtain the build status badge icon for any attacker-specified job and/or build.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2794

Exploit#

No public exploit known

History#

Version 12022-06-22Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.