CVE-2020-2242

2020-09-0114:15:12

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.2%

JSON

A missing permission check in Jenkins database Plugin 1.6 and earlier allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using attacker-specified credentials.

CPENameOperatorVersion
database-plugineqdatabase-1.3
database-plugineqdatabase-1.2
database-plugineqdatabase-1.0
database-plugineqdatabase-1.4.1
database-plugineqdatabase-1.4
database-plugineqdatabase-1.6
database-plugineqdatabase-1.1
database-plugineqdatabase-1.5

Name	Operator	Version
database-plugin	eq	database-1.3
database-plugin	eq	database-1.2
database-plugin	eq	database-1.0
database-plugin	eq	database-1.4.1
database-plugin	eq	database-1.4
database-plugin	eq	database-1.6
database-plugin	eq	database-1.1
database-plugin	eq	database-1.5