CVE-2020-2307
Description
Jenkins Kubernetes Plugin 1.27.3 and earlier allows low-privilege users to access possibly sensitive Jenkins controller environment variables.
CWE
- (none)
Affected
- Jenkins project / Jenkins Kubernetes Plugin — v=unspecified ≤1.27.3 [affected]; v=1.26.5 [unaffected]; v=1.25.4.1 [unaffected]; v=1.21.6 [unaffected]
CVSS
- (none)
References
- https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1646 x_refsource_CONFIRM
Source
cvelistV5-main/cves/2020/2xxx/CVE-2020-2307.json