Jenkins Security Advisory 2020-05-06

{
  "id": "2db6ac08cdda857ed59c96f38314d1866190fc46fa66ee987ddbf86e3675196c",
  "url": "https://www.jenkins.io/security/advisory/2020-05-06/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Jenkins Security Advisory 2020-05-06",
    "summary": "The advisory addresses security vulnerabilities in five Jenkins plugins, with fixes available in updated plugin versions.",
    "evidence": "These versions include fixes to the vulnerabilities described above.",
    "products": [
      {
        "name": {
          "value": "Amazon EC2 Plugin",
          "evidence": "Amazon EC2 Plugin should be updated to version 1.50.2"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "1.50.2",
            "evidence": "Amazon EC2 Plugin should be updated to version 1.50.2"
          }
        ],
        "affected_versions": [
          {
            "value": "up to and including 1.50.1",
            "evidence": "Amazon EC2 Plugin up to and including 1.50.1"
          }
        ]
      },
      {
        "name": {
          "value": "Copy Artifact Plugin",
          "evidence": "Copy Artifact Plugin should be updated to version 1.44"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "1.44",
            "evidence": "Copy Artifact Plugin should be updated to version 1.44"
          }
        ],
        "affected_versions": [
          {
            "value": "up to and including 1.43.1",
            "evidence": "Copy Artifact Plugin up to and including 1.43.1"
          }
        ]
      },
      {
        "name": {
          "value": "Credentials Binding Plugin",
          "evidence": "Credentials Binding Plugin should be updated to version 1.23"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "1.23",
            "evidence": "Credentials Binding Plugin should be updated to version 1.23"
          }
        ],
        "affected_versions": [
          {
            "value": "up to and including 1.22",
            "evidence": "Credentials Binding Plugin up to and including 1.22"
          }
        ]
      },
      {
        "name": {
          "value": "CVS Plugin",
          "evidence": "CVS Plugin should be updated to version 2.16"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "2.16",
            "evidence": "CVS Plugin should be updated to version 2.16"
          }
        ],
        "affected_versions": [
          {
            "value": "up to and including 2.15",
            "evidence": "CVS Plugin up to and including 2.15"
          }
        ]
      },
      {
        "name": {
          "value": "SCM Filter Jervis Plugin",
          "evidence": "SCM Filter Jervis Plugin should be updated to version 0.3"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "0.3",
            "evidence": "SCM Filter Jervis Plugin should be updated to version 0.3"
          }
        ],
        "affected_versions": [
          {
            "value": "up to and including 0.2.1",
            "evidence": "SCM Filter Jervis Plugin up to and including 0.2.1"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2020-2181",
        "evidence": "SECURITY-1374 / CVE-2020-2181"
      },
      {
        "value": "CVE-2020-2182",
        "evidence": "SECURITY-1835 / CVE-2020-2182"
      },
      {
        "value": "CVE-2020-2183",
        "evidence": "SECURITY-988 / CVE-2020-2183"
      },
      {
        "value": "CVE-2020-2184",
        "evidence": "SECURITY-1094 / CVE-2020-2184"
      },
      {
        "value": "CVE-2020-2185",
        "evidence": "SECURITY-381 / CVE-2020-2185"
      },
      {
        "value": "CVE-2020-2186",
        "evidence": "SECURITY-1408 / CVE-2020-2186"
      },
      {
        "value": "CVE-2020-2187",
        "evidence": "SECURITY-1528 / CVE-2020-2187"
      },
      {
        "value": "CVE-2020-2188",
        "evidence": "SECURITY-1844 / CVE-2020-2188"
      },
      {
        "value": "CVE-2020-2189",
        "evidence": "SECURITY-1826 / CVE-2020-2189"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-jenkins-security-advisories",
  "document_id": 23989,
  "published_at": "2020-05-06T12:00:00+00:00"
}