CVE-2020-2091

🗓️ 15 Jan 2020 00:00:00Reported by jenkinsType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 66 Views

A missing permission check in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers to connect to an attacker-specified URL within the AWS region

Reporter	Title	Published	Views	Family All 9
CNVD	CloudBees Jenkins Amazon EC2 Plugin Authorization Issue Vulnerability	22 Jan 202000:00	–	cnvd
Cvelist	CVE-2020-2091	15 Jan 202000:00	–	cvelist
EUVD	EUVD-2022-2802	3 Oct 202520:07	–	euvd
Github Security Blog	Missing permission checks in Jenkins Amazon EC2 Plugin	24 May 202217:06	–	github
NVD	CVE-2020-2091	15 Jan 202016:15	–	nvd
OSV	GHSA-6HMM-77R2-H6HR Missing permission checks in Jenkins Amazon EC2 Plugin	24 May 202217:06	–	osv
Prion	Security feature bypass	15 Jan 202016:15	–	prion
Positive Technologies	PT-2020-15297 · Jenkins · Jenkins Amazon Ec2 Plugin +1	15 Jan 202000:00	–	ptsecurity
vulnersOsv	org.jenkins-ci.plugins:ec2-cloud-axis (>=1.0 <=1.2) potentially affected by CVE-2020-2091 via org.jenkins-ci.plugins:ec2 (=1.19)	24 May 202217:06	–	vulnersosv

NVD

Node

jenkins amazon_ec2Range≤1.47jenkins

[
  {
    "product": "Jenkins Amazon EC2 Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "1.47",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "1.46.2",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "1.42.2",
        "versionType": "custom"
      }
    ]
  }
]