{"action":"Upgrade com.checkmarx.jenkins:checkmarx to 2022.1.3 or later.","affected":[{"fixed":"2022.1.3","introduced":"0"}],"component":"com.checkmarx.jenkins:checkmarx","cve_ids":["CVE-2022-25201"],"ecosystem":"Maven","epss":0.00742,"exploited":false,"fixed_versions":["2022.1.3"],"ghsa_id":"GHSA-wwf6-x2rv-vxqh","id":"tcs_01M5N9HADCP06FTHKP1SEN25F0","modified_at":"2023-11-08T04:08:43.699982Z","published_at":"2022-02-16T00:01:19Z","references":["https://osv.dev/vulnerability/GHSA-wwf6-x2rv-vxqh","https://nvd.nist.gov/vuln/detail/CVE-2022-25201","https://github.com/jenkinsci/checkmarx-plugin","https://github.com/jenkinsci/checkmarx-plugin/releases/tag/Release_2022.1.3","https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-1017"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-wwf6-x2rv-vxqh","url":"https://osv.dev/vulnerability/GHSA-wwf6-x2rv-vxqh"}],"summary":"Missing permission checks in Jenkins Checkmarx Plugin allow capturing credentials"}