[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2022-25199":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":24,"references":26,"score":30,"epss_score":31,"epss_percentile":32,"is_kev":33,"cisa_kev_date_added":34,"cisa_kev_due_date":34,"cisa_ssvc":35,"attack_mappings":41,"exploits":72},311316,"CVE-2022-25199","EUVD-2022-1207","Missing permission check in Jenkins SCP publisher Plugin\n\nSCP publisher Plugin 1.8 and earlier does not perform a permission check in a method implementing form validation.\n\nThis allows attackers with Overall\u002FRead permission to connect to an attacker-specified SSH server using attacker-specified credentials.\n\nAdditionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.","2022-02-16T00:01:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":18,"confidentialityImpact":15},"UNCHANGED","3.1",8.8,"NETWORK","HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE","LOW",true,[21],"CWE-862",[23],"cpe:2.3:a:jenkins:scp_publisher:*:*:*:*:*:jenkins:*:*",[25],"Jenkins Scp Publisher",[27,28,29],"https:\u002F\u002Fwww.jenkins.io\u002Fsecurity\u002Fadvisory\u002F2022-02-15\u002F#SECURITY-2323","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2022-25199","https:\u002F\u002Fgithub.com\u002Fjenkinsci\u002Fscp-plugin",0.64,0.00787,0.55734,false,null,{"timestamp":34,"automatable":36,"tech_impact":37,"exploitation":38,"cisa_decision":39,"cisa_remediation_timeline":40},"no","partial","none",{},"FSU",[42,48,57,64],{"name":43,"source":44,"tactics":45,"technique_id":47},"Exploit Public-Facing Application","attack_vector",[46],"initial-access","T1190",{"name":49,"source":50,"cwe_ids":51,"tactics":52,"capec_ids":54,"technique_id":56},"Exploitation for Stealth","capec",[21],[53],"stealth",[55],"CAPEC-665","T1211",{"name":58,"source":50,"cwe_ids":59,"tactics":60,"capec_ids":62,"technique_id":63},"Component Firmware",[21],[61,53],"persistence",[55],"T1542.002",{"name":65,"source":50,"cwe_ids":66,"tactics":67,"capec_ids":70,"technique_id":71},"Modify Authentication Process",[21],[68,69,61],"credential-access","defense-impairment",[55],"T1556",[]]