CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2020-2124

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 7.2%

CVSS Severity

CVSS v3 Score 4.3

CVSS v2 Score 4.0

References

http://www.openwall.com/lists/oss-security/2020/02/12/3
https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1560
http://www.openwall.com/lists/oss-security/2020/02/12/3
https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1560

Products affected by CVE-2020-2124

Jenkins » Dynamic Extended Choice Parameter » Version: N/A

cpe:2.3:a:jenkins:dynamic_extended_choice_parameter:-
Jenkins » Dynamic Extended Choice Parameter » Version: 1.0.0

cpe:2.3:a:jenkins:dynamic_extended_choice_parameter:1.0.0
Jenkins » Dynamic Extended Choice Parameter » Version: 1.0.1

cpe:2.3:a:jenkins:dynamic_extended_choice_parameter:1.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-2124

Products

Pricing

Contact Us