medium4.3
CVE-2020-2191
Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier does not check permissions on API endpoints that allow adding and removing agent labels.
Impact
Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier does not check permissions on API endpoints that allow adding and removing agent labels.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Self-Organizing Swarm Modules | through 3.20 |