CVEvulnerability
CVE-2020-2139
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-03-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:L/Au:S/C:N/I:C/A:C
- Weaknesses
- CWE-22
Description
An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system.
Affected configurations
• jenkins cobertura (<= 1.15)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://www.openwall.com/lists/oss-security/2020/03/09/1 Third Party Advisory
- https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1668 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2020/03/09/1 Third Party Advisory
- https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1668 Vendor Advisory