Executive brief
CSRF vulnerability in Jenkins Amazon EC2 Plugin
Affected products
- Maven org.jenkins-ci.plugins:ec2
Junglewise Threat Intelligence
CVE-2020-2090: CSRF vulnerability in Jenkins Amazon EC2 Plugin
CVE-2020-2090 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:ec2 (Maven). Vendors: Maven.
Related threats
- Lack of SSL/TLS certificate and hostname validation in Amazon EC2 Plugin
- Users with Overall/Read access can enumerate credentials IDs in Amazon EC2 Plugin
- CSRF vulnerability in Amazon EC2 Plugin
- Missing SSH host key validation in Jenkins Amazon EC2 Plugin
- Missing permission checks in Jenkins Amazon EC2 Plugin