CVE-2020-2275

Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing…

published September 16, 2020

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing attackers with Job/Configure permission to read arbitrary files on the Jenkins controller.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01704 · 77.1th percentile
Published
2020-09-16T13:20Z
EPSS history
Timeline
  • 16 SEP 13:20Z
    Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing…
    cvelistv5