CVE-2020-2097

CVSS v3.1 8.8 (High)

CVSS v2.0 6.5 (Medium)

EPSS 0.10 % (43^th)

Affected Products 1

Advisories 2

Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with Overall/Read access to execute arbitrary OS commands as the OS user account running Jenkins.

Weaknesses

CWE-863: Incorrect Authorization

CVE Status: PUBLISHED
CNA: Jenkins Project
Published Date: 2020-01-15 16:15:14
(4 years ago)
Updated Date: 2023-10-25 18:16:28
(10 months ago)

Affected Products

Jenkins

Sounds

Configuration #1

		CPE23	From	Up To
	Jenkins Sounds for Jenkins 0.5 and prior versions	cpe:2.3:a:jenkins:sounds::::::jenkins		<= 0.5