CVE-2022-27199: Jenkins Cloudbees Aws Credentials

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect to an AWS service using an attacker-specified token.

Affected products

• Jenkins Cloudbees Aws Credentials: before 191.vcb_f183ce58b_9 (fixed in 191.vcb_f183ce58b_9)

Published 2022-03-15. Last modified 2026-06-17.