CVE-2020-2233

CVE-2020-2233: vulnerability in Jenkins Pipeline Maven Integration Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Pipeline Maven Integration Plugin+ Monitor org.jenkins-ci.plugins:pipeline-maven

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
Affected products
Jenkins project · Jenkins Pipeline Maven Integration Plugin
Related CVEs — Jenkins Pipeline Maven Integration Plugin

In the same product, most dangerous first.

CVE-2019-10327—CVE-2019-10327EPSS 1.4%CVE-2020-2234—CVE-2020-2234EPSS 1.1%CVE-2020-2235—CVE-2020-2235EPSS 0.9%CVE-2020-2256—CVE-2020-2256EPSS 0.7%