Download of Code Without Integrity Check
CVE-2020-2320
Summary
Jenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads.
- LOW
- NETWORK
- HIGH
- UNCHANGED
- NONE
- NONE
- HIGH
- HIGH
CWE-494 - Download of Code Without Integrity Check
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.
References
Advisory Timeline
- Published