April 16, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Advisory – CVE-2022-45383 – Jenkins Support Core Plugin Vulnerability
November 16, 2022Rewterz Threat Advisory – CVE-2022-45385 – Jenkins CloudBees Docker Hub/Registry Notification Plugin Vulnerability
November 16, 2022Rewterz Threat Advisory – CVE-2022-45383 – Jenkins Support Core Plugin Vulnerability
November 16, 2022Rewterz Threat Advisory – CVE-2022-45385 – Jenkins CloudBees Docker Hub/Registry Notification Plugin Vulnerability
November 16, 2022
Severity
Low
Analysis Summary
CVE-2022-45384
Jenkins Reverse Proxy Auth Plugin could allow a local authenticated attacker to obtain sensitive information, caused by the storage of manager password unencrypted in the global config.xml file. By gaining access to the config.xml file, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2022-45384
Affected Vendors
Jenkins
Affected Products
Jenkins Reverse Proxy Auth Plugin 1.7.3
Remediation
Refer to Jenkins Security Advisory for patch, upgrade or suggested workaround information.
