Not rated
CVE-2020-2322 Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing…
Description
Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to generate load and to generate memory leaks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Chaos Monkey Plugin 0.4 | earliest → < 0.4.1 | 0.4.1 |
| Jenkins Chaos Monkey Plugin 0.3 | earliest → 0.3 | No fix stated |