Vulnerability Description
Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access control, potentially allowing users to start processes even if they're not allowed to log in.
CVSS Score
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jenkins | Wmi Windows Agents | < 1.8.1 |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2022/05/17/8Mailing ListThird Party Advisory
- https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2604Vendor Advisory
- http://www.openwall.com/lists/oss-security/2022/05/17/8Mailing ListThird Party Advisory
- https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2604Vendor Advisory
FAQ
What is CVE-2022-30951?
CVE-2022-30951 is a vulnerability with a CVSS score of 8.8 (HIGH). Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access control, potentially allowing users to start processes even if they're not allow...
How severe is CVE-2022-30951?
CVE-2022-30951 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-30951?
Check the references section above for vendor advisories and patch information. Affected products include: Jenkins Wmi Windows Agents.