Jenkins Project Jenkins Self-Organizing Swarm Plug-in Modules Plugin

• CVE-2020-2191 Unrated Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier does not check permissions on API endpoints that allow adding and removing agent labels. 0.7%
• CVE-2020-2192 Unrated A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allows attackers to add or remove agent labels. 0.6%