CVE-2020-2234

CVE-2020-2234: vulnerability in Jenkins Pipeline Maven Integration Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Pipeline Maven Integration Plugin+ Monitor org.jenkins-ci.plugins:pipeline-maven

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.
Affected products
Jenkins project · Jenkins Pipeline Maven Integration Plugin
Related CVEs — Jenkins Pipeline Maven Integration Plugin

In the same product, most dangerous first.

CVE-2019-10327—CVE-2019-10327EPSS 1.4%CVE-2020-2235—CVE-2020-2235EPSS 0.9%CVE-2020-2233—CVE-2020-2233EPSS 0.8%CVE-2020-2256—CVE-2020-2256EPSS 0.7%