-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:ansible | maven | <= 1.0 | 1.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from form validation methods (doFill*CredentialsIdItems) that implemented credential ID enumeration without proper permission checks. The commit patching CVE-2020-2310 adds authorization checks (item.hasPermission and Jenkins.ADMINISTER checks) to these methods across multiple files. The original vulnerable versions of these methods accepted a Project parameter without validation, while the patched versions use Item + QueryParameter with security checks. These methods directly correspond to the credential enumeration endpoints described in the vulnerability reports.
JavaJavaOngoing coverage of React2Shell