CVE-2022-28142 affects Jenkins Proxmox Plugin versions 0.6.0 and earlier, where configuring the plugin to ignore SSL/TLS issues globally disables certificate validation for the Jenkins controller JVM. This vulnerability carries a high severity CVSS score of 7.5, indicating a critical security flaw that allows an unauthenticated attacker to compromise data integrity over the network with low attack complexity. Despite its severity, there is currently no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit or Nuclei modules. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness at this time.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 0.6.0CPE matchmatch criteria | cpe:2.3:a:jenkins:proxmox:*:*:*:*:*:jenkins:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.