Maven/org.jenkins-ci.plugins:azure-keyvault CVE-2020-2313: medium 4.3, EPSS 0.79%
Missing permission checks in Jenkins Azure Key Vault Plugin allow enumerating credentials IDs
Action: Upgrade org.jenkins-ci.plugins:azure-keyvault to 2.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1 | - |
Fixed versions
| 2.1 |
Sources
- osv: GHSA-gf8w-6hcm-rh3j
- https://nvd.nist.gov/vuln/detail/CVE-2020-2313
- https://github.com/jenkinsci/azure-keyvault-plugin/commit/f09ed652cc572d8ba5d7c8c8f9972fd241883c21
- https://github.com/jenkinsci/azure-keyvault-plugin
- https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2110
CVE-2020-2313 · published · modified · JSON