[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2022-30955":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":24,"references":26,"score":31,"epss_score":32,"epss_percentile":33,"is_kev":34,"cisa_kev_date_added":35,"cisa_kev_due_date":35,"cisa_ssvc":36,"attack_mappings":42,"exploits":73},315258,"CVE-2022-30955","EUVD-2022-2627","Missing permission check in Jenkins GitLab Plugin\n\nJenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall\u002FRead permission to enumerate credentials IDs of credentials stored in Jenkins. An enumeration of credentials IDs in GitLab Plugin 1.5.32 requires the appropriate permissions.","2022-05-18T00:00:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":17,"privilegesRequired":18,"confidentialityImpact":18},"UNCHANGED","3.1",4.3,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N","NONE","LOW",true,[21],"CWE-862",[23],"cpe:2.3:a:jenkins:gitlab:*:*:*:*:*:jenkins:*:*",[25],"Jenkins Gitlab",[27,28,29,30],"https:\u002F\u002Fwww.jenkins.io\u002Fsecurity\u002Fadvisory\u002F2022-05-17\u002F#SECURITY-2753","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2022-30955","https:\u002F\u002Fgithub.com\u002Fjenkinsci\u002Fgitlab-plugin\u002Fcommit\u002F37e48ca920a4779109b885f4de62111e0baf846a","https:\u002F\u002Fgithub.com\u002Fjenkinsci\u002Fgitlab-plugin",0.42,0.009,0.59416,false,null,{"timestamp":35,"automatable":37,"tech_impact":38,"exploitation":39,"cisa_decision":40,"cisa_remediation_timeline":41},"no","partial","none",{},"FSU",[43,49,58,65],{"name":44,"source":45,"tactics":46,"technique_id":48},"Exploit Public-Facing Application","attack_vector",[47],"initial-access","T1190",{"name":50,"source":51,"cwe_ids":52,"tactics":53,"capec_ids":55,"technique_id":57},"Exploitation for Stealth","capec",[21],[54],"stealth",[56],"CAPEC-665","T1211",{"name":59,"source":51,"cwe_ids":60,"tactics":61,"capec_ids":63,"technique_id":64},"Component Firmware",[21],[62,54],"persistence",[56],"T1542.002",{"name":66,"source":51,"cwe_ids":67,"tactics":68,"capec_ids":71,"technique_id":72},"Modify Authentication Process",[21],[69,70,62],"credential-access","defense-impairment",[56],"T1556",[]]