CVE-2020-2302

2020-11-0415:15:11

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

A missing permission check in Jenkins Active Directory Plugin 2.19 and earlier allows attackers with Overall/Read permission to access the domain health check diagnostic page.

CPENameOperatorVersion
active-directory-plugineqactive-directory-1.20
active-directory-plugineqactive-directory-1.32
active-directory-plugineqactive-directory-2.14
active-directory-plugineqactive-directory-2.8
active-directory-plugineqactive-directory-1.41
active-directory-plugineqactive-directory-1.39
active-directory-plugineqactive-directory-2.13
active-directory-plugineqactive-directory-2.2
active-directory-plugineqactive-directory-2.9
active-directory-plugineqactive-directory-1.44

Name	Operator	Version
active-directory-plugin	eq	active-directory-1.20
active-directory-plugin	eq	active-directory-1.32
active-directory-plugin	eq	active-directory-2.14
active-directory-plugin	eq	active-directory-2.8
active-directory-plugin	eq	active-directory-1.41
active-directory-plugin	eq	active-directory-1.39
active-directory-plugin	eq	active-directory-2.13
active-directory-plugin	eq	active-directory-2.2
active-directory-plugin	eq	active-directory-2.9
active-directory-plugin	eq	active-directory-1.44