Skip to content
Sign in
Not rated

CVE-2020-2148 A missing permission check in Jenkins Mac Plugin 1.1.0 and earlier allows attackers with Overall/Read permission to…

Description

A missing permission check in Jenkins Mac Plugin 1.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials.

Affected products and versions

Product Affected versions Fixed in
Jenkins Mac Plugin 1.1 earliest → 1.1.0 No fix stated

Other CVEs of Jenkins Mac Plugin

The 3 CVEs of Jenkins Mac Plugin →
CVE-2020-2146 Jenkins Mac Plugin 1.1.0 and earlier does not validate SSH host keys when connecting agents created by the plugin,… Not rated CVE-2020-2147 A cross-site request forgery vulnerability in Jenkins Mac Plugin 1.1.0 and earlier allows attackers to connect to an… Not rated
Track this CVE