Skip to content
Sign in
Not rated

CVE-2020-2121 Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the…

Description

Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

Affected products and versions

Product Affected versions Fixed in
Jenkins Google Kubernetes Engine Plugin 0.8 earliest → 0.8.0 No fix stated

Other CVEs of Jenkins Google Kubernetes Engine Plugin

The 3 CVEs of Jenkins Google Kubernetes Engine Plugin →
CVE-2019-10445 A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with… Not rated CVE-2019-10365 Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token… Not rated
Track this CVE