Parameterized Remote Trigger

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-2239 Maven MEDIUM PATCH This Month

Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Jenkins Information Disclosure Parameterized Remote Trigger

NVD

CVSS 3.1

4.3

EPSS

0.5%

CVE-2020-2239 Maven

EPSS 1% CVSS 4.3

MEDIUM PATCH This Month

Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Jenkins Information Disclosure Parameterized Remote Trigger

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy