GCVE - cpe:2.3:a:jenkins:proxmox:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:proxmox:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Proxmox (`03ad3980-faae-5f3e-a2b6-5d0cb277110b`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-28144`	vulnerable	2026-06-08 05:42:44.108876	Details available Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified host using attacker-specified username and password (perform a connection test), disable SSL/TLS validation for the entire Jenkins controller JVM as part of the connection test (see CVE-2022-28142), and test a rollback with attacker-specified parameters. Published: 2022-03-29T12:31:01.000Z Updated: 2024-08-03T05:48:36.863Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2082 http://www.openwall.com/lists/oss-security/2022/03/29/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28143`	vulnerable	2026-06-08 05:42:44.108548	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins Proxmox Plugin 0.7.0 and earlier allows attackers to connect to an attacker-specified host using attacker-specified username and password (perform a connection test), disable SSL/TLS validation for the entire Jenkins controller JVM as part of the connection test (see CVE-2022-28142), and test a rollback with attacker-specified parameters. Published: 2022-03-29T12:30:59.000Z Updated: 2024-08-03T05:48:37.160Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2082 http://www.openwall.com/lists/oss-security/2022/03/29/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28142`	vulnerable	2026-06-08 05:42:44.108079	Details available Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS certificate validation globally for the Jenkins controller JVM when configured to ignore SSL/TLS issues. Published: 2022-03-29T12:30:58.000Z Updated: 2024-08-03T05:48:37.099Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2081 http://www.openwall.com/lists/oss-security/2022/03/29/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28141`	vulnerable	2026-06-08 05:42:44.107447	Details available Jenkins Proxmox Plugin 0.5.0 and earlier stores the Proxmox Datacenter password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system. Published: 2022-03-29T12:30:56.000Z Updated: 2024-08-03T05:48:36.817Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2079 http://www.openwall.com/lists/oss-security/2022/03/29/1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.