CVE-2020-2216: Jenkins Zephyr For Jira Test Management

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A missing permission check in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified username and password.

Affected products

• Jenkins Zephyr For Jira Test Management: up to and including 1.5

Published 2020-07-02. Last modified 2026-06-17.