CVE-2022-41235

Description

Jenkins WildFly Deployer Plugin 1.0.2 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system.

Risk Information

Base Score

5.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.305

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-1003072,CVE-2022-41235 are affected in Jenkins - wildfly-deployer 1.0.2	Windows
Vulnerabilities CVE-2019-1003072,CVE-2022-41235 are affected in Jenkins - wildfly-deployer for Linux 1.0.2	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234