CVE-2022-30951

Description

Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access control, potentially allowing users to start processes even if theyre not allowed to log in.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.91

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2022-30951,CVE-2022-30950 are fixed in Jenkins - windows-slaves 1.8.1	Windows
Vulnerabilities CVE-2022-30951,CVE-2022-30950 are fixed in Jenkins - windows-slaves for Linux 1.8.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234