Lucene search

Project Inheritance Security Vulnerabilities - 2020

cve

CVE-2020-2197

Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to access Inheritance Project job configurations in XML format.

4.3CVSS

4.5AI Score

0.001EPSS

2020-06-03 01:15 PM

cve

CVE-2020-2198

Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when transmitting job config.xml data to users without Job/Configure.

6.5CVSS

6.3AI Score

0.001EPSS

2020-06-03 01:15 PM