Not rated
CVE-2020-2307 Jenkins Kubernetes Plugin 1.27.3 and earlier allows low-privilege users to access possibly sensitive Jenkins…
Description
Jenkins Kubernetes Plugin 1.27.3 and earlier allows low-privilege users to access possibly sensitive Jenkins controller environment variables.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Kubernetes Plugin 1.27 | earliest → 1.27.3 | No fix stated |
| Jenkins Kubernetes Plugin 1.26 | earliest → < 1.26.5 | 1.26.5 |
| Jenkins Kubernetes Plugin 1.25 | earliest → < 1.25.4.1 | 1.25.4.1 |
| Jenkins Kubernetes Plugin 1.21 | earliest → < 1.21.6 | 1.21.6 |
Other CVEs of Jenkins Kubernetes Plugin
The 4 CVEs of Jenkins Kubernetes Plugin →
CVE-2023-30513
Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks)…
7.5
High
CVE-2020-2308
A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission…
Not rated
CVE-2020-2309
A missing/An incorrect permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with…
Not rated