Skip to content
Not rated

CVE-2020-2168 Jenkins Azure Container Service Plugin 1.0.1 and earlier does not configure its YAML parser to prevent the instantiation…

Description

Jenkins Azure Container Service Plugin 1.0.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

Affected products and versions

Product Affected versions Fixed in
Jenkins Azure Container Service Plugin 1.0 earliest → 1.0.1 No fix stated
Track this CVE