What is CVE-2020-2212?

CVE-2020-2212 is a medium-severity vulnerability in Jenkins GitHub Coverage Reporter, classified under Insufficiently Protected Credentials. CVSS score: 4.3/10. Published 2020-07-02.

How severe is CVE-2020-2212?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Jenkins GitHub Coverage Reporter

CVE-2020-2212

Jenkins GitHub Coverage Reporter Plugin 1.8 and earlier stores secrets unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system or read permissions on the system configuration.

EPSS: 0.007 (49.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Jenkins Github_coverage_reporter
Jenkins Project Github Coverage Reporter Plugin — versions unspecified, next of 1.8

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

jenkinsci-cert@googlegroups.com (x_refsource_CONFIRM, Vendor Advisory)
jenkinsci-cert@googlegroups.com (mailing-list, x_refsource_MLIST, Third Party Advisory)

Frequently asked questions

What is CVE-2020-2212?: CVE-2020-2212 is a medium-severity vulnerability in Jenkins GitHub Coverage Reporter, classified under Insufficiently Protected Credentials. CVSS score: 4.3/10. Published 2020-07-02.
How severe is CVE-2020-2212?: Medium severity. CVSS v3 base score is 4.3 out of 10.