CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

Jenkins Security Advisory 2020-09-01

unknownCVE-2020-2238CVE-2020-2239CVE-2020-2240CVE-2020-2241CVE-2020-2242CVE-2020-2243
Affects plugin: Build Failure Analyzer Affects plugin: Cadence vManager Affects plugin: Database Affects plugin: Git Parameter Affects plugin: JSGames Affects plugin: Klocwork Analysis Affects plugin: Parameterized Remote Trigger Affects plugin: ReadyAPI Functional Testing Affects plugin: tfs Affects plugin: Valgrind

Details

Source
Jenkins Security Advisories (INTL · vendor-psirt · site)
Severity
unknown
Published
2020-09-01
Exploitation
Not in CISA KEV at last sync

Original advisory: https://www.jenkins.io/security/advisory/2020-09-01/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2020-2238coverage & exploitation statusNVD · CVE.org
CVE-2020-2239coverage & exploitation statusNVD · CVE.org
CVE-2020-2240coverage & exploitation statusNVD · CVE.org
CVE-2020-2241coverage & exploitation statusNVD · CVE.org
CVE-2020-2242coverage & exploitation statusNVD · CVE.org
CVE-2020-2243coverage & exploitation statusNVD · CVE.org
CVE-2020-2244coverage & exploitation statusNVD · CVE.org
CVE-2020-2245coverage & exploitation statusNVD · CVE.org
CVE-2020-2246coverage & exploitation statusNVD · CVE.org
CVE-2020-2247coverage & exploitation statusNVD · CVE.org
CVE-2020-2248coverage & exploitation statusNVD · CVE.org
CVE-2020-2249coverage & exploitation statusNVD · CVE.org
CVE-2020-2250coverage & exploitation statusNVD · CVE.org
CVE-2020-2251coverage & exploitation statusNVD · CVE.org

More from Jenkins Security Advisories