CVE-2020-2311

Summary

A missing permission check in Jenkins AWS Global Configuration Plugin 1.5 and earlier allows attackers with Overall/Read permission to replace the global AWS configuration.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins AWS Global Configuration Pluginunspecified <= 1.5affected
Jenkins projectJenkins AWS Global Configuration Plugin1.3.1unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References