Lucene search
K

Missing permission checks in chaos-monkey

šŸ—“ļøĀ 03 Dec 2020Ā 00:00:00Reported byĀ Jenkins Security TeamTypeĀ 
jenkins
Ā jenkins
šŸ”—Ā www.jenkins.iošŸ‘Ā 2Ā Views

Chaos-monkey 0.3 and earlier lack permission checks; Overall Read can trigger load and memory leaks; 0.4 requires Overall Administer.

Related
Detection
ReporterTitlePublishedViews
Family
Circl
CVE-2020-2322
3 Dec 202018:25
–circl
CNNVD
Cloudbees Jenkins ęŽˆęƒé—®é¢˜ę¼ę“ž
3 Dec 202000:00
–cnnvd
CNVD
Cloudbees Jenkins Chaos Monkey Plugin Authorization Issues Vulnerability
4 Dec 202000:00
–cnvd
CVE
CVE-2020-2322
3 Dec 202015:55
–cve
Cvelist
CVE-2020-2322
3 Dec 202015:55
–cvelist
EUVD
EUVD-2022-4616
3 Oct 202520:07
–euvd
Github Security Blog
Missing permission checks in Jenkins Chaos Monkey Plugin
24 May 202217:35
–github
NVD
CVE-2020-2322
3 Dec 202016:15
–nvd
OSV
CVE-2020-2322
3 Dec 202016:15
–osv
OSV
GHSA-MR75-899X-QCXQ Missing permission checks in Jenkins Chaos Monkey Plugin
24 May 202217:35
–osv
Rows per page
Vulners
Node
jenkinschaos-monkeyRange<0.4jenkins

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Dec 2020 00:00Current
7.3High risk
Vulners AI Score7.3
CVSS 25
CVSS 3.17.5
CVSS 34.3
EPSS0.01323
2