Security Advisory

CVE-2020-2090

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-01-15 15:15:23
Last updated 2024-08-04 06:54:00
Assigner jenkins
State PUBLISHED

Description

A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers to connect to an attacker-specified URL within the AWS region using attacker-specified credentials IDs obtained through another method.