CVE-2022-34175 is a high-severity vulnerability affecting Jenkins versions 2.335 through 2.355, allowing unauthenticated attackers to bypass security mechanisms and directly access sensitive view fragments. With a CVSS score of 7.5, this network-exploitable flaw requires no user interaction and could lead to significant information disclosure. While no public exploits (Metasploit, Nuclei, ExploitDB) are currently available and it's not on the KEV catalog, its high FAUCET Risk Score of 64/100 indicates a notable risk. There is minimal community discussion or media coverage surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.355CPE match | cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:* | ||
>= 2.335, <= 2.355CPE matchmatch criteria | cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.