CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2020/09/16 2:15 p.m.•19 views

CVE-2020-2272

A missing permission check in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS6.6AI score

SaveExploits0References2

CVE•added 2020/09/16 1:20 p.m.•76 views

CVE-2020-2272

CVE-2020-2272 concerns the Jenkins ElasTest Plugin prior to 1.2.2, where a missing permission check allows users with Overall/Read to initiate connections to an attacker-specified URL using attacker-specified credentials. The vulnerability stems from insufficient authorization in the plugin’s req...

4.3CVSS4.4AI score0.00656EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2020/09/16 1:20 p.m.•27 views

CVE-2020-2272

A missing permission check in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

4.5AI score0.00656EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by