CVE-2022-27198 is a vulnerability in Jenkins Cloudbees Aws Credentials
Published on March 15, 2022
A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.
Products Associated with CVE-2022-27198
Want to know whenever a new CVE is published for Jenkins Cloudbees Aws Credentials? stack.watch will email you.
Affected Versions
Jenkins project Jenkins CloudBees AWS Credentials Plugin:- Version unspecified, <= 189.v3551d5642995 is affected.
- Version 1.28.2 is unaffected.
- Version 1.32.1 is unaffected.
Exploit Probability
EPSS
0.08%
Percentile
22.73%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.