CVE-2020-2323

MEDIUM · CVSS 5.3 EPSS 0.82%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-12-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-2323

Severity

MEDIUM

CVSS

5.3

EPSS

0.82%

Jenkins

Original NVD Description

Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read permission to access the Chaos Monkey page and to see the history of actions.