Not rated
CVE-2020-2261 Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with…
Description
Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with Job/Configure permission to run arbitrary commands on the Jenkins controller
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Perfecto Plugin 1.17 | earliest → 1.17 | No fix stated |
References
- www.jenkins.io www.jenkins.io
- [oss-security] 20200916 Multiple vulnerabilities in Jenkins plugins www.openwall.com
Timeline
- Published
- Last modified