Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:kubernetes_continuous_deploy:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

VendorJenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744)
ProductKubernetes Continuous Deploy (ae0b1097-1bc5-5203-980c-fb070b0ddb12)
Edition*
Language*
Software edition*
Target softwarejenkins
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27211 vulnerable 2026-06-08 05:41:55.005315 Details available
A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Published: 2022-03-15T16:46:01.000Z
Updated: 2024-10-15T17:13:37.197Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27210 vulnerable 2026-06-08 05:41:55.004889 Details available
A cross-site request forgery (CSRF) vulnerability in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Published: 2022-03-15T16:45:59.000Z
Updated: 2024-08-03T05:25:32.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27209 vulnerable 2026-06-08 05:41:55.004552 Details available
A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Published: 2022-03-15T16:45:58.000Z
Updated: 2024-08-03T05:25:31.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27208 vulnerable 2026-06-08 05:41:55.004119 Details available
Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows users with Credentials/Create permission to read arbitrary files on the Jenkins controller.
Published: 2022-03-15T16:45:56.000Z
Updated: 2024-08-03T05:25:32.460Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.