CVE-2020-2099

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to obtain the connection secrets for those agents, which can be used to connect to Jenkins, impersonating those agents.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Weakness enumeration

CWE-330

Affected software

Vendor	Product	Versions
Jenkins project	Jenkins	>= unspecified, <= 2.213; >= unspecified, <= LTS 2.204.1

References

http://www.openwall.com/lists/oss-security/2020/01/29/1Mailing List, Third Party Advisory
https://access.redhat.com/errata/RHBA-2020:0402
https://access.redhat.com/errata/RHBA-2020:0675
https://access.redhat.com/errata/RHSA-2020:0681
https://access.redhat.com/errata/RHSA-2020:0683
https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1682Vendor Advisory
http://www.openwall.com/lists/oss-security/2020/01/29/1Mailing List, Third Party Advisory
https://access.redhat.com/errata/RHBA-2020:0402
https://access.redhat.com/errata/RHBA-2020:0675
https://access.redhat.com/errata/RHSA-2020:0681
https://access.redhat.com/errata/RHSA-2020:0683
https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1682Vendor Advisory

Timeline

Published: Jan 29, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-209905.4A cross site scripting (XSS) vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web s CVE-2020-21005.8Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848.CVE-2020-210034.8Pbootcms v2.0.3 is vulnerable to Cross Site Scripting (XSS) via admin.php.CVE-2020-210056.5WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because the upload file type i CVE-2020-21015.3Jenkins 2.218 and earlier, LTS 2.204.1 and earlier did not use a constant-time comparison function for validating connection secrets, which CVE-2020-210129.8Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execut CVE-2020-210137.2emlog v6.0.0 contains a SQL injection via /admin/comment.php.CVE-2020-210146.5emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php.CVE-2020-210169.8D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.CVE-2020-21025.3Jenkins 2.218 and earlier, LTS 2.204.1 and earlier used a non-constant time comparison function when validating an HMAC.CVE-2020-21035.4Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page.CVE-2020-210386.1Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php.