CVE-2020-2168

—

CVSS 3.1

8.8 high

EPSS

2%p79

Published

Mar 25, 2020 (Mar 25, 2020)

Modified

Jun 17, 2026

Description

Jenkins Azure Container Service Plugin 1.0.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.

Vendors: jenkins
Products: azure container service
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.