CVE-2020-2320

2020-12-0316:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.8%

JSON

Jenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads.

CPENameOperatorVersion
plugin-installation-manager-tooleqjenkins-plugin-management-parent-pom-0.1-alpha-4
plugin-installation-manager-tooleqjenkins-plugin-management-parent-pom-0.1-alpha-3
plugin-installation-manager-tooleqjenkins-plugin-management-parent-pom-0.1-alpha-6
plugin-installation-manager-tooleqjenkins-plugin-management-parent-pom-0.1-alpha-5
plugin-installation-manager-tooleq0.1-alpha-4
plugin-installation-manager-tooleqplugin-management-parent-pom-1.0.1
plugin-installation-manager-tooleq0.1-alpha-10
plugin-installation-manager-tooleq2.1.2
plugin-installation-manager-tooleqplugin-management-parent-pom-0.1-alpha-9
plugin-installation-manager-tooleqplugin-management-parent-pom-1.1.2

Name	Operator	Version
plugin-installation-manager-tool	eq	jenkins-plugin-management-parent-pom-0.1-alpha-4
plugin-installation-manager-tool	eq	jenkins-plugin-management-parent-pom-0.1-alpha-3
plugin-installation-manager-tool	eq	jenkins-plugin-management-parent-pom-0.1-alpha-6
plugin-installation-manager-tool	eq	jenkins-plugin-management-parent-pom-0.1-alpha-5
plugin-installation-manager-tool	eq	0.1-alpha-4
plugin-installation-manager-tool	eq	plugin-management-parent-pom-1.0.1
plugin-installation-manager-tool	eq	0.1-alpha-10
plugin-installation-manager-tool	eq	2.1.2
plugin-installation-manager-tool	eq	plugin-management-parent-pom-0.1-alpha-9
plugin-installation-manager-tool	eq	plugin-management-parent-pom-1.1.2