Executive brief
XXE vulnerability in Jenkins WebSphere Deployer Plugin
Affected products
- Maven org.jenkins-ci.plugins:websphere-deployer
Junglewise Threat Intelligence
CVE-2020-2108: XXE vulnerability in Jenkins WebSphere Deployer Plugin
CVE-2020-2108 · Severity: low · CVSS 3 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:websphere-deployer (Maven). Vendors: Maven.
Related threats
- SSL/TLS certificate validation globally and unconditionally disabled by Jenkins WebSphere Deployer Plugin
- Jenkins WebSphere Deployer Plugin missing permission check
- Cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin
- Jenkins WebSphere Deployer Plugin stores credentials in plain text