CVE-2020-2091

CVE-2020-2091: vulnerability in Jenkins Amazon EC2 Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Amazon EC2 Plugin+ Monitor org.jenkins-ci.plugins:ec2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
A missing permission check in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL within the AWS region using attacker-specified credentials IDs obtained through another method.
Affected products
Jenkins project · Jenkins Amazon EC2 Plugin
Related CVEs — Jenkins Amazon EC2 Plugin

In the same product, most dangerous first.

CVE-2020-2090—CVE-2020-2090EPSS 0.8%CVE-2020-2185—CVE-2020-2185EPSS 0.7%CVE-2020-2188—CVE-2020-2188EPSS 0.6%CVE-2020-2186—CVE-2020-2186EPSS 0.6%CVE-2020-2187—CVE-2020-2187EPSS 0.4%CVE-2019-10364—CVE-2019-10364EPSS 0.3%