CVE-2020-2323

Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read permission to access…

published December 3, 2020

CVSS
—
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read permission to access the Chaos Monkey page and to see the history of actions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00834 · 57.2th percentile
Published
2020-12-03T15:55Z
EPSS history
Timeline
  • 03 DEC 15:55Z
    Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read permission to access…
    cvelistv5