Security Advisory

CVE-2020-2260

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-16 13:20:42
Last updated 2024-08-04 07:01:41
Assigner jenkins
State PUBLISHED

Description

A missing permission check in Jenkins Perfecto Plugin 1.17 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials.