CVE-2020-2148

Publication date

2020-03-09 15:01:02

Family

jenkins

State

PUBLISHED

Description

A missing permission check in Jenkins Mac Plugin 1.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials.