Non notée
CVE-2020-2322 Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing…
Description
Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to generate load and to generate memory leaks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Chaos Monkey Plugin 0.4 | premières → < 0.4.1 | 0.4.1 |
| Jenkins Chaos Monkey Plugin 0.3 | premières → 0.3 | Pas de correctif indiqué |