Not rated
CVE-2020-2323 Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers…
Description
Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read permission to access the Chaos Monkey page and to see the history of actions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Chaos Monkey Plugin 0.4 | earliest → 0.4 | No fix stated |
References
- www.jenkins.io www.jenkins.io
- [oss-security] 20201203 Multiple vulnerabilities in Jenkins www.openwall.com
Timeline
- Published
- Last modified