← Vulnerability feed

Vulnerability record · CVE-2022-20614 · published 12 January 2022

CVE-2022-20614: Jenkins mailer missing authorization vulnerability

Jenkins · Mailer

A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

4.3 CVSS 3.1 Medium EPSS 1.1% · top 35.4% CWE-862 · Missing authorization
4.3CVSS 3.1 base score, v2 4.0
1.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.openwall.com/lists/oss-security/2022/01/12/6 Mailing ListThird Party Advisory
https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2163 Vendor Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html PatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2022/01/12/6 Mailing ListThird Party Advisory
https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2163 Vendor Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html PatchThird Party Advisory

Track CVE-2022-20614 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-22963Spring Cloud Function routing expression SpEL injection RCESpring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions allow a user to supply a crafted SpEL expression as a routing-expression w…KEVEPSS 100%analysed9.8CVE-2022-22965Spring Framework data binding remote code execution (Spring4Shell)Spring MVC and Spring WebFlux applications on JDK 9+ can be exploited through data binding to achieve remote code execution. The known exploit path r…KEVEPSS 100%analysed9.8CVE-2017-1000353Jenkins CLI Java deserialization allows unauthenticated remote code executionJenkins 2.56 and earlier, and 2.46.1 LTS and earlier, deserialize attacker-supplied Java SignedObject data sent to the Jenkins CLI, bypassing the exi…KEVEPSS 100%analysed8.5CVE-2021-39144XStream deserialization allows remote command executionXStream, a Java library that serializes objects to and from XML, can execute host commands when a remote attacker with sufficient rights manipulates …KEVEPSS 98%analysed9.8CVE-2021-29921Python vulnerabilityIn Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) all…EPSS 6.9%8.8CVE-2021-39139Xstream unrestricted file upload vulnerabilityXStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load a…EPSS 4.5%8.8CVE-2019-10384Jenkins cross-site request forgery vulnerabilityJenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens…EPSS 1.6%8.8CVE-2018-1999001Jenkins vulnerabilityA unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows attacker…EPSS 18%

Source: NIST National Vulnerability Database (record CVE-2022-20614), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.