Insecure Access in Jenkins Kubernetes Plugin Allows Exposure of Sensitive Environment Variables

CVE-2020-2307

What is CVE-2020-2307?

The Jenkins Kubernetes Plugin versions 1.27.3 and earlier are susceptible to an access control vulnerability that permits low-privileged users to gain unauthorized access to potentially sensitive environment variables on the Jenkins controller. This flaw could lead to the exposure of critical information and compromise the security of the Jenkins environment. Administrators are advised to review and apply necessary updates to mitigate the risks associated with this vulnerability.

References