CVE-2022-30951

Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access control, potentially allowing users to start processes even if they're not allowed to log in.

Score

CVSS 3.1 8.8 High

Status

Modified - jenkinsci-cert@googlegroups.com

Published

2022-05-17

Last modified

2024-08-03

Weaknesses

CWE-862

Affected products

• Wmi Windows Agents (Jenkins)
• Jenkins Wmi Windows Agents Plugin (Jenkins Project)

References

• http://www.openwall.com/lists/oss-security/2022/05/17/8
• https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2604