CVE-2020-2094

2020-01-1516:15:14

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient.

CPENameOperatorVersion
cloudbees-jenkins-advisor-plugineqcloudbees-jenkins-advisor-1.1
cloudbees-jenkins-advisor-plugineqcloudbees-jenkins-advisor-1.4
cloudbees-jenkins-advisor-plugineqcloudbees-jenkins-advisor-2.10
cloudbees-jenkins-advisor-plugineqcloudbees-jenkins-advisor-2.11
cloudbees-jenkins-advisor-plugineqcloudbees-jenkins-advisor-1.3
cloudbees-jenkins-advisor-plugineqcloudbees-jenkins-advisor-1.0
cloudbees-jenkins-advisor-plugineqcloudbees-jenkins-advisor-3.0
cloudbees-jenkins-advisor-plugineqcloudbees-jenkins-advisor-1.5
cloudbees-jenkins-advisor-plugineqcloudbees-jenkins-advisor-1.2

Name	Operator	Version
cloudbees-jenkins-advisor-plugin	eq	cloudbees-jenkins-advisor-1.1
cloudbees-jenkins-advisor-plugin	eq	cloudbees-jenkins-advisor-1.4
cloudbees-jenkins-advisor-plugin	eq	cloudbees-jenkins-advisor-2.10
cloudbees-jenkins-advisor-plugin	eq	cloudbees-jenkins-advisor-2.11
cloudbees-jenkins-advisor-plugin	eq	cloudbees-jenkins-advisor-1.3
cloudbees-jenkins-advisor-plugin	eq	cloudbees-jenkins-advisor-1.0
cloudbees-jenkins-advisor-plugin	eq	cloudbees-jenkins-advisor-3.0
cloudbees-jenkins-advisor-plugin	eq	cloudbees-jenkins-advisor-1.5
cloudbees-jenkins-advisor-plugin	eq	cloudbees-jenkins-advisor-1.2