CVE-2020-2234

2020-08-1214:15:13

Google

osv.dev

jenkins

permission check

maven integration plugin

unauthorized access

jdbc

credentials capture

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.