{"id":"CVE-2020-2183","details":"Jenkins Copy Artifact Plugin 1.43.1 and earlier performs improper permission checks, allowing attackers to copy artifacts from jobs they have no permission to access.","aliases":["GHSA-vv89-xggx-qqh2"],"modified":"2026-07-09T00:13:36.636276Z","published":"2020-05-06T13:15:14.243Z","references":[{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2020/05/06/3"},{"type":"ADVISORY","url":"https://jenkins.io/security/advisory/2020-05-06/#SECURITY-988"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/copyartifact-plugin","events":[{"introduced":"0"},{"last_affected":"7e965470d1e804e0b523527e20387935a8c93f8c"}],"database_specific":{"cpe":"cpe:2.3:a:jenkins:copy_artifact:*:*:*:*:*:jenkins:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.43.1"}],"source":"CPE_RANGE"}}],"versions":["copyartifact-1.43.1","copyartifact-1.43","copyartifact-1.42.1","copyartifact-1.42.1-beta-1","copyartifact-1.42","copyartifact-1.41","copyartifact-1.40","copyartifact-1.40-beta-1","copyartifact-1.39.1","copyartifact-1.39","copyartifact-1.38.1","copyartifact-1.38","copyartifact-1.37","copyartifact-1.36.1","copyartifact-1.36","copyartifact-1.35.2","copyartifact-1.35.1","copyartifact-1.35","copyartifact-1.34","copyartifact-1.33","copyartifact-1.32.1","copyartifact-1.32","copyartifact-1.31","copyartifact-1.30","copyartifact-1.29","copyartifact-1.28","copyartifact-1.27","copyartifact-1.26","copyartifact-1.25","copyartifact-1.24","copyartifact-1.23","copyartifact-1.22","copyartifact-1.21","copyartifact-1.20","copyartifact-1.19","copyartifact-1.18","copyartifact-1.17","copyartifact-1.16","copyartifact-1.15","copyartifact-1.14","copyartifact-1.13"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2183.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}