Junglewise Threat Intelligence

CVE-2020-2228: Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin

CVE-2020-2228 · Severity: low · CVSS 3.1 · Published 2022-05-24

Technologies: org.jenkins-ci.plugins:gitlab-oauth (Maven). Vendors: Maven.

Executive brief

Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin

Affected products

  • Maven org.jenkins-ci.plugins:gitlab-oauth

Related threats