Jenkins Amazon EC2 vulnerabilities

6 CVEs affecting Jenkins Amazon EC2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-2188, published 2020-05-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-2091, published 2020-01-15. High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days. A missing permission check in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL within the AWS region using…
CVE-2020-2090, published 2020-01-15. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers to connect to an attacker-specified URL within the AWS region using attacker-specified…
CVE-2020-2185, published 2020-05-06. Medium severity, CVSS 5.6. EPSS: 0.7% chance of exploitation in the next 30 days. Jenkins Amazon EC2 Plugin 1.50.1 and earlier does not validate SSH host keys when connecting agents, enabling man-in-the-middle attacks.
CVE-2020-2188, published 2020-05-06. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. A missing permission check in Jenkins Amazon EC2 Plugin 1.50.1 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
CVE-2020-2186, published 2020-05-06. Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days. A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances.
CVE-2020-2187, published 2020-05-06. Medium severity, CVSS 5.6. EPSS: 0.4% chance of exploitation in the next 30 days. Jenkins Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed certificates and does not perform hostname validation, enabling man-in-the-middle attacks.