CVE-2020-2308

score

<0.1

cvss

4.3

epss

1.2%

published

2020-11-04

kev added

—

first seen

2026-10-21

Jenkins Kubernetes Plugin 1.27.3 and earlier contains a missing permission check caused by inadequate access control in listing global pod template names, letting attackers with Overall/Read permission enumerate templates, exploit requires attacker to have Overall/Read permission.