← voltar
CVE-2020-2099

CVE-2020-2099

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.0%
probabilidade de exploração
1.0%top 38% das CVEs
exploração observada
nãonenhuma fonte reporta
Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to obtain the connection secrets for those agents, which can be used to connect to Jenkins, impersonating those agents.
Produtos afetados
Jenkins project · Jenkins
Referências
https://access.redhat.com/errata/RHBA-2020:0402https://access.redhat.com/errata/RHBA-2020:0675https://access.redhat.com/errata/RHSA-2020:0681https://access.redhat.com/errata/RHSA-2020:0683https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1682http://www.openwall.com/lists/oss-security/2020/01/29/1