CVE-2020-2121

2020-02-1215:15:13

Google

osv.dev

7.7 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.2%

JSON

Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

CPENameOperatorVersion
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.2.0
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.8.0
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.5.0
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.7.0
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.7.1
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.4.0
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.6.3
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.3.0
google-kubernetes-engine-plugineqgoogle-kubernetes-engine-0.1.0

Name	Operator	Version
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.2.0
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.8.0
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.5.0
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.7.0
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.7.1
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.4.0
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.6.3
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.3.0
google-kubernetes-engine-plugin	eq	google-kubernetes-engine-0.1.0