CVE-2020-2302

2020-11-0415:15:11

Google

osv.dev

cve-2020-2302

jenkins

active directory plugin

permission check

domain health check

diagnostic page

security vulnerability

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

22.0%

JSON

A missing permission check in Jenkins Active Directory Plugin 2.19 and earlier allows attackers with Overall/Read permission to access the domain health check diagnostic page.

References

www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1999