Executive brief
Missing permission checks in Jenkins Fortify on Demand Plugin
Affected products
- Maven org.jenkins-ci.plugins:fortify-on-demand-uploader
Junglewise Threat Intelligence
CVE-2020-2204: Missing permission checks in Jenkins Fortify on Demand Plugin
CVE-2020-2204 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:fortify-on-demand-uploader (Maven). Vendors: Maven.
Related threats
- CSRF vulnerability in Jenkins Fortify on Demand Plugin
- Users with Overall/Read access could enumerate credentials IDs in Jenkins Fortify on Demand Plugin
- Jenkins Fortify on Demand Plugin stores credentials in plain text
- Jenkins Fortify on Demand Uploader Plugin CSRF vulnerability
- SSRF vulnerability due to missing permission check in Fortify on Demand Uploader Plugin