CVE-2020-2139

Опубликовано: 09 мар. 2020

Источник: nvd

CVSS3: 6.5

CVSS2: 8.5

EPSS Низкий

Описание

An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system.

Ссылки

http://www.openwall.com/lists/oss-security/2020/03/09/1
Third Party Advisory
https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1668
Vendor Advisory
http://www.openwall.com/lists/oss-security/2020/03/09/1
Third Party Advisory
https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1668
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jenkins:cobertura:*:*:*:*:*:jenkins:*:*

Версия до 1.15 (включая)

EPSS

Процентиль: 90%

0.05232

Низкий

6.5 Medium

CVSS3

8.5 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVE-2020-2139

CVSS3: 6.5

redhat

почти 6 лет назад

GHSA-m935-chfp-9f63

CVSS3: 6.5

github

больше 3 лет назад

Arbitrary file write vulnerability in Jenkins Cobertura Plugin

EPSS

Процентиль: 90%

0.05232

Низкий

6.5 Medium

CVSS3

8.5 High

CVSS2

Дефекты

CWE-22