Jenkins Project Jenkins Google Kubernetes Engine Plugin
3 CVEs affecting Jenkins Project Jenkins Google Kubernetes Engine Plugin. Latest disclosed: 2020-02-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-2121 | High | 8.8 | 2020-02-12 | Jenkins Google Kubernetes Engine Plugin 0.8.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a re… |
CVE-2019-10445 | Medium | 4.3 | 2019-10-16 | A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with Overall/Read permission to obtain limited inform… |
CVE-2019-10365 | Medium | 4.3 | 2019-07-31 | Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could… |