{"api_version":"1","generated_at":"2026-07-24T17:19:15+00:00","cve":"CVE-2022-30951","urls":{"html":"https://cve.report/CVE-2022-30951","api":"https://cve.report/api/cve/CVE-2022-30951.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-30951","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-30951"},"summary":{"title":"CVE-2022-30951","description":"Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access control, potentially allowing users to start processes even if they're not allowed to log in.","state":"PUBLIC","assigner":"jenkinsci-cert@googlegroups.com","published_at":"2022-05-17 15:15:00","updated_at":"2023-11-03 18:18:00"},"problem_types":["CWE-862"],"metrics":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2022/05/17/8","name":"[oss-security] 20220517 Multiple vulnerabilities in Jenkins plugins","refsource":"MLIST","tags":[],"title":"oss-security - Multiple vulnerabilities in Jenkins plugins","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2604","name":"https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2604","refsource":"CONFIRM","tags":[],"title":"Jenkins Security Advisory 2022-05-17","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30951","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30951","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"30951","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"jenkins","cpe5":"wmi_windows_agents","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"jenkins","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"30951","vulnerable":"1","versionEndIncluding":"1.8","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"jenkins","cpe5":"wmi_windows_agents","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"jenkins","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2022-30951","ASSIGNER":"jenkinsci-cert@googlegroups.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access control, potentially allowing users to start processes even if they're not allowed to log in."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"Jenkins project","product":{"product_data":[{"product_name":"Jenkins WMI Windows Agents Plugin","version":{"version_data":[{"version_affected":"<=","version_name":"unspecified","version_value":"1.8"}]}}]}}]}},"references":{"reference_data":[{"url":"https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2604","refsource":"MISC","name":"https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2604"},{"url":"http://www.openwall.com/lists/oss-security/2022/05/17/8","refsource":"MISC","name":"http://www.openwall.com/lists/oss-security/2022/05/17/8"}]}},"nvd":{"publishedDate":"2022-05-17 15:15:00","lastModifiedDate":"2023-11-03 18:18:00","problem_types":["CWE-862"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"severity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:jenkins:wmi_windows_agents:*:*:*:*:*:jenkins:*:*","versionEndExcluding":"1.8.1","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}