A missing permission check in Jenkins AWS Global Configuration Plugin 1.5 and earlier allows attackers with Overall/Read permission to replace the global AWS configuration...
4.3CVSS6.6AI score0.00825EPSS
SaveExploits0
OSV•added 2020/11/04 3:15 p.m.•16 views
CVE-2020-2311
A missing permission check in Jenkins AWS Global Configuration Plugin 1.5 and earlier allows attackers with Overall/Read permission to replace the global AWS configuration...