CVE-2022-45383: Jenkins Support Core

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission.

Affected products

• Jenkins Support Core: before 1206.1208.v9b_7a_1d48db_0f (fixed in 1206.1208.v9b_7a_1d48db_0f)

Published 2022-11-15. Last modified 2026-06-17.