Not rated
CVE-2020-2234 A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read…
Description
A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Pipeline Maven Integration Plugin 3.8 | earliest → 3.8.2 | No fix stated |
References
- jenkins.io jenkins.io
- [oss-security] 20200812 Multiple vulnerabilities in Jenkins and Jenkins plugins www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Jenkins Pipeline Maven Integration Plugin
The 6 CVEs of Jenkins Pipeline Maven Integration Plugin →
CVE-2023-41934
Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with…
Not rated
CVE-2020-2256
Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as…
Not rated
CVE-2020-2235
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier…
Not rated
CVE-2020-2233
A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read…
Not rated