CVE-2022-30950: vulnerability in Jenkins WMI Windows Agents Plugin
Published · Updated
Follow this CVE+ Monitor Jenkins WMI Windows Agents Plugin+ Monitor org.jenkins-ci.plugins:windows-slaves
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.9%
Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library which has a buffer overflow vulnerability that may allow users able to connect to a named pipe to execute commands on the Windows agent machine.
Affected products
Jenkins project · Jenkins WMI Windows Agents PluginRelated CVEs — Jenkins WMI Windows Agents Plugin
In the same product, most dangerous first.