Auth bypass in Jenkins Pipeline\
CVE-2022-29047
Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull requests (or equivalent), but not able to commit directly to the configured SCM, to effectively change the Pipeline behavior by changing the definition of a dynamically retrieved library in their pull request, even if the Pipeline is configured to not trust them.
Vulnerability class: Broken Access Control
EPSS: 0.011 (62.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Jenkins Pipeline\ — versions _shared_groovy_libraries
- Jenkins Project Pipeline: Shared Groovy Libraries Plugin — versions unspecified, 2.21.3
Weakness classification (CWE)
Public proof-of-concept exploits
References
- jenkinsci-cert@googlegroups.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-29047?
- CVE-2022-29047 is a medium-severity vulnerability in Jenkins Pipeline\, classified under Incorrect Authorization. CVSS score: 5.3/10. Published 2022-04-12.
- How severe is CVE-2022-29047?
- Medium severity. CVSS v3 base score is 5.3 out of 10.
- Is CVE-2022-29047 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.