CVE-2022-23116

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-311

Affected software

No affected versions have been published.

Timeline

Published: Jan 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-231177.5Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve a CVE-2022-231188.8Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an atta CVE-2022-231197.5A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below coul CVE-2022-23125.4The Student Result or Employee Database WordPress plugin before 1.7.5 does not have CSRF in its AJAX actions, allowing attackers to make log CVE-2022-231207.8A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could all CVE-2022-231219.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required t CVE-2022-231229.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required t CVE-2022-231239.8This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not re CVE-2022-231249.8This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Authentication is not re CVE-2022-231259.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required t CVE-2022-231269.8TeslaMate before 1.25.1 (when using the default Docker configuration) allows attackers to open doors of Tesla vehicles, start Keyless Drivin CVE-2022-231276.1Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions