CVE-2022-20618

CVE-2022-20618: vulnerability in Jenkins Bitbucket Branch Source Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Bitbucket Branch Source Plugin+ Monitor org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
A missing permission check in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.
Affected products
Jenkins project · Jenkins Bitbucket Branch Source Plugin
Related CVEs — Jenkins Bitbucket Branch Source Plugin

In the same product, most dangerous first.

CVE-2022-20619—CVE-2022-20619EPSS 0.7%