Security Advisory
CVE-2020-2272
4.3
MEDIUM
Vulnerability Description
A missing permission check in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
Published Date
September 16, 2020
Official Source
NIST NVD Advisory