CVE-2020-2159

Katalog CVE

CVSS 8.8 · High EPSS 2,0%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada jenkins cryptomove. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Jenkins CryptoMove Plugin 0.1.33 and earlier allows attackers with Job/Configure access to execute arbitrary OS commands on the Jenkins master as the OS user account running Jenkins.

Rincian

Terbit di NVD

9 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 80,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1635 advisory vendor
• http://www.openwall.com/lists/oss-security/2020/03/09/1 mailing list · advisory pihak ketiga