Not rated
CVE-2020-2323 Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers…
Description
Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read permission to access the Chaos Monkey page and to see the history of actions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Chaos Monkey Plugin 0.4 | earliest → 0.4 | No fix stated |