Lucene search
PRIOn knowledge basePRION:CVE-2020-2323HistoryDec 03, 2020 - 4:15 p.m.
Design/Logic Flaw
2020-12-0316:15:00
PRIOn knowledge base
www.prio-n.com
5
0.001 Low
EPSS
Percentile
32.8%
Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read permission to access the Chaos Monkey page and to see the history of actions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| chaos_monkey | le | 0.4 |
Related
cve
cve
CVE-2020-2323
2020-12-03 16:15:12
cvelist
cvelist
CVE-2020-2323
2020-12-03 15:55:16
github
github
Missing permission checks in Jenkins Chaos Monkey Plugin
2022-05-24 17:35:09
osv
osv
Missing permission checks in Jenkins Chaos Monkey Plugin
2022-05-24 17:35:09
nvd
nvd
CVE-2020-2323
2020-12-03 16:15:12