Aller au contenu
Se connecter
Non notée

CVE-2020-2121 Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the…

Description

Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Google Kubernetes Engine Plugin 0.8 premières → 0.8.0 Pas de correctif indiqué

Autres CVE de Jenkins Google Kubernetes Engine Plugin

Les 3 CVE de Jenkins Google Kubernetes Engine Plugin →
CVE-2019-10445 A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with… Non notée CVE-2019-10365 Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token… Non notée
Suivre cette CVE