Source |
CVE Liste |
Identifiant |
4287163 |
Date de publication |
2022-03-15 17:15:11 (vue: 2022-03-15 19:07:13) |
Titre |
CVE-2022-27210 |
Texte |
A cross-site request forgery (CSRF) vulnerability in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. |
Notes |
|
Envoyé |
Oui |
Condensat |
2022 27210 allows another attacker attackers capturing connect continuous credentials cross csrf cve deploy earlier forgery ids jenkins kubernetes method obtained plugin request server site specified ssh stored through using vulnerability |
Tags |
Vulnerability
|
Stories |
Uber
|
Move |
|