CVE-2020-2320
9.8CRITICALJenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads.
Veröffentlicht: 12/3/2020Aktualisiert: 11/21/2024
Beschreibung
Jenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads.
KI-AnalyseKI-gestützt
Betroffene Produkte
jenkinsinstallation_manager_tool
Referenzen
- http://www.openwall.com/lists/oss-security/2020/12/03/2Third Party Advisory
- https://www.jenkins.io/security/advisory/2020-12-03/#SECURITY-1856Vendor Advisory
- http://www.openwall.com/lists/oss-security/2020/12/03/2Third Party Advisory
- https://www.jenkins.io/security/advisory/2020-12-03/#SECURITY-1856Vendor Advisory