← CVE Intelligence

CVE-2020-2091

Jenkins project / Jenkins Amazon EC2 Plugin PUBLISHED

Description (CNA)

A missing permission check in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL within the AWS region using attacker-specified credentials IDs obtained through another method.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Amazon EC2 Pluginaffected unspecified through 1.47; unaffected 1.46.2 before unspecified; unaffected 1.42.2 before unspecified

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.