CVE-2020-2322

Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to…

published December 3, 2020

CVSS
—
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to generate load and to generate memory leaks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01339 · 71.1th percentile
Published
2020-12-03T15:55Z
EPSS history
Timeline
  • 03 DEC 15:55Z
    Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to…
    cvelistv5