Skip to content
Sign in
Not rated

CVE-2020-2294 Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints,…

Description

Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfigure the plugin.

Affected products and versions

Product Affected versions Fixed in
Jenkins Maven Cascade Release Plugin 1.3 earliest → 1.3.2 No fix stated

Other CVEs of Jenkins Maven Cascade Release Plugin

The 2 CVEs of Jenkins Maven Cascade Release Plugin →
CVE-2020-2295 A cross-site request forgery (CSRF) vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows… Not rated
Track this CVE