CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects Jenkins.
CVE
CVE-2020-2294
Severity
MEDIUM
CVSS
6.5
EPSS
0.81%
Jenkins
Original NVD Description
Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfigure the plugin.
Related CVEs
Other vulnerabilities affecting the same vendor(s)