Executive brief
CSRF vulnerability in Amazon EC2 Plugin
Affected products
- Maven org.jenkins-ci.plugins:ec2
Junglewise Threat Intelligence
CVE-2020-2186: CSRF vulnerability in Amazon EC2 Plugin
CVE-2020-2186 · Severity: low · CVSS 3 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:ec2 (Maven). Vendors: Maven.
Related threats
- Lack of SSL/TLS certificate and hostname validation in Amazon EC2 Plugin
- Users with Overall/Read access can enumerate credentials IDs in Amazon EC2 Plugin
- Missing SSH host key validation in Jenkins Amazon EC2 Plugin
- Missing permission checks in Jenkins Amazon EC2 Plugin
- CSRF vulnerability in Jenkins Amazon EC2 Plugin