CVE-2020-2239
MEDIUMJenkins Parameterized Remote Trigger Plugin <3.1.3 - Info Disclosure
Title source: llmDescription
Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.
Scores
CVSS v3
4.3
EPSS
0.0005
EPSS Percentile
14.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-311
Status
published
Products (2)
jenkins/parameterized_remote_trigger
< 3.1.3
org.jenkins-ci.plugins/Parameterized-Remote-Trigger
0 - 3.1.4Maven
Published
Sep 01, 2020
Tracked Since
Feb 18, 2026