Not rated

CVE-2020-2311 A missing permission check in Jenkins AWS Global Configuration Plugin 1.5 and earlier allows attackers with Overall/Read…

Description

A missing permission check in Jenkins AWS Global Configuration Plugin 1.5 and earlier allows attackers with Overall/Read permission to replace the global AWS configuration.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins AWS Global Configuration Plugin 1.5	earliest → 1.5	No fix stated
Jenkins AWS Global Configuration Plugin 1.3	earliest → < 1.3.1	1.3.1

Do you use Jenkins AWS Global Configuration Plugin?

Track this CVE Watch Jenkins AWS Global Configuration Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2020-2311

Timeline

Published November 4, 2020
Last modified August 4, 2024

References

www.jenkins.io www.jenkins.io

Track this CVE