All vulnerabilities

Servers and applications

CVE-2022-34175

Jenkins 2.335 through 2.355 (both inclusive) allows attackers in some cases to bypass a protection mechanism, thereby directly accessing some view fragments containing sensitive information, bypassing any permission checks in the corresponding view.

Severity
High 7.5
Published
23 Jun 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
JenkinsServers and applications · cpe:a:jenkins:jenkins
  • From 2.335 up to 2.355

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-34175
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-34175