Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jenkins Amazon EC2 Plugin unspecified Clear all filters
TI-2020-01967 CVE-2020-2090 · GHSA-9hvf-pfq3-7pp6

Cross-site request forgery in Jenkins Amazon EC2 Plugin

Priority MEDIUM 40

A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers to connect to an attacker-specified URL within the AWS region using attacker-specified credentials IDs obtained th…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00834 Published 2020-01-15 Fixed in 1.46.2, 1.42.2 +1 CWE-352
TI-2020-01968 CVE-2020-2091 · GHSA-6hmm-77r2-h6hr

Missing authorization in Jenkins Amazon EC2 Plugin

Priority LOW 38

A missing permission check in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL within the AWS region using attacker-specified credentials ID…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01134 Published 2020-01-15 Fixed in 1.46.2, 1.42.2 +1 CWE-862