Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-t8f3-q2yk-gqfk
Summary
Non-constant time comparison of inbound TCP agent connection secret
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier does not use a constant-time comparison validating the connection secret when an inbound TCP agent connection is initiated. This could potentially allow attackers to use statistical methods to obtain the connection secret.

Jenkins 2.219, LTS 2.204.2 now uses a constant-time comparison function for verifying connection secrets.
Aliases
0
alias CVE-2020-2101
1
alias GHSA-w7jr-wqw6-54xc
Fixed_packages
0
url pkg:maven/org.jenkins-ci.main/jenkins-core@2.204.2
purl pkg:maven/org.jenkins-ci.main/jenkins-core@2.204.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@2.204.2
1
url pkg:maven/org.jenkins-ci.main/jenkins-core@2.219
purl pkg:maven/org.jenkins-ci.main/jenkins-core@2.219
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@2.219
Affected_packages
0
url pkg:maven/org.jenkins-ci.main/jenkins-core@2.204.1
purl pkg:maven/org.jenkins-ci.main/jenkins-core@2.204.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-at4v-19pn-wqf2
1
vulnerability VCID-qg4r-a3xt-kfbh
2
vulnerability VCID-s9rq-3bpy-83fu
3
vulnerability VCID-t8f3-q2yk-gqfk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@2.204.1
1
url pkg:maven/org.jenkins-ci.main/jenkins-core@2.205
purl pkg:maven/org.jenkins-ci.main/jenkins-core@2.205
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9c49-hb3u-n7dq
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@2.205
2
url pkg:maven/org.jenkins-ci.main/jenkins-core@2.218
purl pkg:maven/org.jenkins-ci.main/jenkins-core@2.218
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-at4v-19pn-wqf2
1
vulnerability VCID-kvq9-4uqu-pfah
2
vulnerability VCID-qg4r-a3xt-kfbh
3
vulnerability VCID-s9rq-3bpy-83fu
4
vulnerability VCID-sejb-9wh7-k7c4
5
vulnerability VCID-t8f3-q2yk-gqfk
6
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@2.218
3
url pkg:rpm/redhat/atomic-enterprise-service-catalog@1:3.11.170-1.git.1.91db82e?arch=el7
purl pkg:rpm/redhat/atomic-enterprise-service-catalog@1:3.11.170-1.git.1.91db82e?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-enterprise-service-catalog@1:3.11.170-1.git.1.91db82e%3Farch=el7
4
url pkg:rpm/redhat/atomic-openshift@3.11.170-1.git.0.00cac56?arch=el7
purl pkg:rpm/redhat/atomic-openshift@3.11.170-1.git.0.00cac56?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.11.170-1.git.0.00cac56%3Farch=el7
5
url pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.170-1.git.1.0a0df6a?arch=el7
purl pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.170-1.git.1.0a0df6a?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.170-1.git.1.0a0df6a%3Farch=el7
6
url pkg:rpm/redhat/atomic-openshift-descheduler@3.11.170-1.git.1.9ad83f2?arch=el7
purl pkg:rpm/redhat/atomic-openshift-descheduler@3.11.170-1.git.1.9ad83f2?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-descheduler@3.11.170-1.git.1.9ad83f2%3Farch=el7
7
url pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.170-1.git.1.55fab05?arch=el7
purl pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.170-1.git.1.55fab05?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.170-1.git.1.55fab05%3Farch=el7
8
url pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.170-1.git.1.357f177?arch=el7
purl pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.170-1.git.1.357f177?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.170-1.git.1.357f177%3Farch=el7
9
url pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.170-1.git.1.b1f90a6?arch=el7
purl pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.170-1.git.1.b1f90a6?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.170-1.git.1.b1f90a6%3Farch=el7
10
url pkg:rpm/redhat/atomic-openshift-service-idler@3.11.170-1.git.1.8328979?arch=el7
purl pkg:rpm/redhat/atomic-openshift-service-idler@3.11.170-1.git.1.8328979?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-service-idler@3.11.170-1.git.1.8328979%3Farch=el7
11
url pkg:rpm/redhat/atomic-openshift-web-console@3.11.170-1.git.1.3d64e8b?arch=el7
purl pkg:rpm/redhat/atomic-openshift-web-console@3.11.170-1.git.1.3d64e8b?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-web-console@3.11.170-1.git.1.3d64e8b%3Farch=el7
12
url pkg:rpm/redhat/cri-o@1.11.16-0.5.dev.rhaos3.11.git3f89eba?arch=el7
purl pkg:rpm/redhat/cri-o@1.11.16-0.5.dev.rhaos3.11.git3f89eba?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cri-o@1.11.16-0.5.dev.rhaos3.11.git3f89eba%3Farch=el7
13
url pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.170-1.git.1.b49be83?arch=el7
purl pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.170-1.git.1.b49be83?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.170-1.git.1.b49be83%3Farch=el7
14
url pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.170-1.git.1.61d7960?arch=el7
purl pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.170-1.git.1.61d7960?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.170-1.git.1.61d7960%3Farch=el7
15
url pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.170-1.git.1.51473b7?arch=el7
purl pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.170-1.git.1.51473b7?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.170-1.git.1.51473b7%3Farch=el7
16
url pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.170-1.git.1.227bc98?arch=el7
purl pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.170-1.git.1.227bc98?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.170-1.git.1.227bc98%3Farch=el7
17
url pkg:rpm/redhat/jenkins@2.204.2.1580891656-1?arch=el7
purl pkg:rpm/redhat/jenkins@2.204.2.1580891656-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins@2.204.2.1580891656-1%3Farch=el7
18
url pkg:rpm/redhat/jenkins@2.204.2.1583446818-1?arch=el7
purl pkg:rpm/redhat/jenkins@2.204.2.1583446818-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-at4v-19pn-wqf2
1
vulnerability VCID-kvq9-4uqu-pfah
2
vulnerability VCID-qg4r-a3xt-kfbh
3
vulnerability VCID-s9rq-3bpy-83fu
4
vulnerability VCID-sejb-9wh7-k7c4
5
vulnerability VCID-t8f3-q2yk-gqfk
6
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins@2.204.2.1583446818-1%3Farch=el7
19
url pkg:rpm/redhat/jenkins-2-plugins@3.11.1579107288-1?arch=el7
purl pkg:rpm/redhat/jenkins-2-plugins@3.11.1579107288-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@3.11.1579107288-1%3Farch=el7
20
url pkg:rpm/redhat/openshift-ansible@3.11.170-2.git.5.8802564?arch=el7
purl pkg:rpm/redhat/openshift-ansible@3.11.170-2.git.5.8802564?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-ansible@3.11.170-2.git.5.8802564%3Farch=el7
21
url pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.170-1.git.1.dfe6c52?arch=el7
purl pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.170-1.git.1.dfe6c52?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.170-1.git.1.dfe6c52%3Farch=el7
22
url pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.170-1.git.1.661684b?arch=el7
purl pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.170-1.git.1.661684b?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.170-1.git.1.661684b%3Farch=el7
23
url pkg:rpm/redhat/openshift-kuryr@3.11.170-1.git.1.7265da1?arch=el7
purl pkg:rpm/redhat/openshift-kuryr@3.11.170-1.git.1.7265da1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3s9f-prpy-hbcx
1
vulnerability VCID-at4v-19pn-wqf2
2
vulnerability VCID-kvq9-4uqu-pfah
3
vulnerability VCID-qg4r-a3xt-kfbh
4
vulnerability VCID-s9rq-3bpy-83fu
5
vulnerability VCID-sejb-9wh7-k7c4
6
vulnerability VCID-t8f3-q2yk-gqfk
7
vulnerability VCID-urd7-cve7-dqdk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-kuryr@3.11.170-1.git.1.7265da1%3Farch=el7
References
0
reference_url https://access.redhat.com/errata/RHBA-2020:0402
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHBA-2020:0402
1
reference_url https://access.redhat.com/errata/RHBA-2020:0675
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHBA-2020:0675
2
reference_url https://access.redhat.com/errata/RHSA-2020:0681
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0681
3
reference_url https://access.redhat.com/errata/RHSA-2020:0683
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2020:0683
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2101.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2101.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-2101
reference_id
reference_type
scores
0
value 0.01645
scoring_system epss
scoring_elements 0.81912
published_at 2026-04-02T12:55:00Z
1
value 0.01645
scoring_system epss
scoring_elements 0.82003
published_at 2026-04-16T12:55:00Z
2
value 0.01645
scoring_system epss
scoring_elements 0.81968
published_at 2026-04-13T12:55:00Z
3
value 0.01645
scoring_system epss
scoring_elements 0.81973
published_at 2026-04-12T12:55:00Z
4
value 0.01645
scoring_system epss
scoring_elements 0.81984
published_at 2026-04-11T12:55:00Z
5
value 0.01645
scoring_system epss
scoring_elements 0.81965
published_at 2026-04-09T12:55:00Z
6
value 0.01645
scoring_system epss
scoring_elements 0.81957
published_at 2026-04-08T12:55:00Z
7
value 0.01645
scoring_system epss
scoring_elements 0.81931
published_at 2026-04-07T12:55:00Z
8
value 0.01645
scoring_system epss
scoring_elements 0.81934
published_at 2026-04-04T12:55:00Z
9
value 0.01645
scoring_system epss
scoring_elements 0.819
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-2101
6
reference_url https://github.com/jenkinsci/jenkins
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/jenkinsci/jenkins
7
reference_url https://github.com/jenkinsci/jenkins/commit/0ba36508187ff771bba87feaf03057496775064c
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/jenkinsci/jenkins/commit/0ba36508187ff771bba87feaf03057496775064c
8
reference_url https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1659
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1659
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-2101
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-2101
10
reference_url http://www.openwall.com/lists/oss-security/2020/01/29/1
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2020/01/29/1
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1797084
reference_id 1797084
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1797084
12
reference_url https://github.com/advisories/GHSA-w7jr-wqw6-54xc
reference_id GHSA-w7jr-wqw6-54xc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w7jr-wqw6-54xc
Weaknesses
0
cwe_id 203
name Observable Discrepancy
description The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
1
cwe_id 208
name Observable Timing Discrepancy
description Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.
2
cwe_id 385
name Covert Timing Channel
description Covert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.
3
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
4
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-t8f3-q2yk-gqfk