CVE-2022-36920

A cross-site request forgery (CSRF) vulnerability in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

• CWE-352

• http://www.openwall.com/lists/oss-security/2022/07/27/1Mailing List, Third Party Advisory
• https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2790%20%282%29Vendor Advisory
• http://www.openwall.com/lists/oss-security/2022/07/27/1Mailing List, Third Party Advisory
• https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2790%20%282%29Vendor Advisory

Published

Jul 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-36915Jenkins Android Signing Plugin 2.2.5 and earlier does not pe…4.3
• CVE-2022-36916A cross-site request forgery (CSRF) vulnerability in Jenkins…8
• CVE-2022-36917A missing permission check in Jenkins Google Cloud Backup Pl…4.3
• CVE-2022-36918Jenkins Buckminster Plugin 1.1.1 and earlier does not perfor…4.3
• CVE-2022-36919A missing permission check in Jenkins Coverity Plugin 1.11.4…4.3
• CVE-2022-3692Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-36921A missing permission check in Jenkins Coverity Plugin 1.11.4…8.1
• CVE-2022-36922Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier d…6.1
• CVE-2022-36923Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, …7.5
• CVE-2022-36924The Zoom Rooms Installer for Windows prior to 5.12.6 contain…7.8
• CVE-2022-36925Zoom Rooms for macOS clients before version 5.11.4 contain a…7.8
• CVE-2022-36926Zoom Rooms for macOS clients before version 5.11.3 contain a…7.8