Not rated
CVE-2020-2308 A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission…
Description
A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to list global pod template names.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Kubernetes Plugin 1.27 | earliest → latest | No fix stated |
| Jenkins Kubernetes Plugin 1.26 | earliest → < 1.26.5 | 1.26.5 |
| Jenkins Kubernetes Plugin 1.25 | earliest → < 1.25.4.1 | 1.25.4.1 |
| Jenkins Kubernetes Plugin 1.21 | earliest → < 1.21.6 | 1.21.6 |
Other CVEs of Jenkins Kubernetes Plugin
The 4 CVEs of Jenkins Kubernetes Plugin →
CVE-2023-30513
Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks)…
7.5
High
CVE-2020-2307
Jenkins Kubernetes Plugin 1.27.3 and earlier allows low-privilege users to access possibly sensitive Jenkins…
Not rated
CVE-2020-2309
A missing/An incorrect permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with…
Not rated