WaratekVRT Sign in

Medium Support Core CVEs

5 CVEs, 1 protected by Waratek

Reset
More filters (1)
Columns
Product support core✕
Overview 5 matches · 1 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
5matches 1protected20.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 1 20.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 4 80.0%
Critical 0 0.0% High 0 0.0% Medium 5 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 20.0% partly blocked 0 0.0% not blocked 4 80.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 5 100.0%
split by peak 2 / quarter
No exploit published: 4Protected by Waratek: 1 Medium: 5 not blocked: 4blocked by ARMR today: 1 No public exploit: 5
Q4 192 Protected by Waratek1 No exploit published1 Medium2 blocked by ARMR today1 not blocked1 No public exploit2 Q1 200 Q2 200 Q3 200 Q4 200 Q1 211 No exploit published1 Medium1 not blocked1 No public exploit1 Q2 210 Q3 210 Q4 210 Q1 221 No exploit published1 Medium1 not blocked1 No public exploit1 Q2 220 Q3 220 Q4 221 No exploit published1 Medium1 not blocked1 No public exploit1
Q4 19Q2 20Q4 20Q2 21Q4 21Q2 22Q4 22
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2022-45383 Medium 2022-11-15 No exploit published No public exploit An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission.
CVE-2022-25187 Medium 2022-02-15 No exploit published No public exploit Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle.
CVE-2021-21621 Medium 2021-02-24 No exploit published No public exploit Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the "About user (basic authentication details only)" information, which can include the session ID of the user creating the support bundle in some configurations.
CVE-2019-16540 Medium 2019-11-21 Protected by Waratek No public exploit A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the Jenkins master.
CVE-2019-16539 Medium 2019-11-21 No exploit published No public exploit A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles.