CVE-2020-2252

Improper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin

4.8 MediumFix available

Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

0.96%Up 0.3 points since Apr 14, 2021

What each source reports

NVD Score used 4.8

Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.

Record: CVE-2020-2252
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0: 5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Weakness: CWE-295
Updated: 2026-11-02

CVE List No score

Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.

Record: CVE-2020-2252
Updated: 2026-11-02

EUVDEUVD-2022-2778 No score

Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.

Record: EUVD-2022-2778
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6fr3-286q-q3cr 4.8

Improper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin

Jenkins Mailer Plugin prior to 1.32.1, 1.31.1, and 1.29.1 does not perform hostname validation when connecting to the configured SMTP server. This lack of validation could be abused using a man-in-the-middle attack to intercept these connections.

Mailer Plugin 1.32.1, 1.31.1, and 1.29.1 validates the SMTP hostname when connecting via TLS by default. In Mailer Plugin 1.32 and earlier, administrators can set the Java system property mail.smtp.ssl.checkserveridentity to true on startup to enable this protection.

In case of problems, this protection can be disabled again by setting the Java system property mail.smtp.ssl.checkserveridentity to false on startup.

Record: GHSA-6fr3-286q-q3cr
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-295
Updated: 2026-11-02

OSV 4.8

Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.

Record: CVE-2020-2252
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated: 2026-11-02

OSVGHSA-6fr3-286q-q3cr 4.8

Improper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin

In case of problems, this protection can be disabled again by setting the Java system property mail.smtp.ssl.checkserveridentity to false on startup.

Record: GHSA-6fr3-286q-q3cr
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness: CWE-295
Updated: 2026-11-02

OSVRHSA-2020:4297 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.6.1 package security update

Record: RHSA-2020:4297
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2020:5102 6.5

Red Hat Security Advisory: OpenShift Container Platform 3.11.318 jenkins-2-plugins security update

Record: RHSA-2020:5102
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`org.jenkins-ci.plugins:mailer` Maven	1.32 to 1.32	1.32.1
`org.jenkins-ci.plugins:mailer` Maven	1.30 up to 1.31.1	1.31.1
`org.jenkins-ci.plugins:mailer` Maven	before 1.29.1	1.29.1
`org.jenkins-ci.plugins:mailer` Maven	1.32 up to 1.32.1	1.32.1
`org.jenkins-ci.plugins:mailer` Maven	1.30 up to 1.31.1, plus listed versions 1.31	1.31.1
`org.jenkins-ci.plugins:mailer` Maven	before 1.29.1, plus listed versions 1.11.101.111.121.12-beta-1 Show 26 moreShow less 1.131.141.151.161.171.181.191.21.201.211.221.231.23-beta-21.241.251.261.271.281.291.31.41.51.61.71.81.9	1.29.1
`jenkins-2-plugins` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:4.6.1601368321-1.el8	0:4.6.1601368321-1.el8
`openshift-clients` Red Hat:openshift:4.6::el7 From an advisory covering 9 CVEs	before 0:4.6.0-202010081244.p0.git.3794.4743d24.el7	0:4.6.0-202010081244.p0.git.3794.4743d24.el7
`openshift-clients-redistributable` Red Hat:openshift:4.6::el7 From an advisory covering 9 CVEs	before 0:4.6.0-202010081244.p0.git.3794.4743d24.el7	0:4.6.0-202010081244.p0.git.3794.4743d24.el7
`openshift-clients` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:4.6.0-202010081244.p0.git.3794.4743d24.el8	0:4.6.0-202010081244.p0.git.3794.4743d24.el8

Show 19 moreShow less

Affected packages
Package	Affected	Fixed
`openshift-clients-redistributable` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:4.6.0-202010081244.p0.git.3794.4743d24.el8	0:4.6.0-202010081244.p0.git.3794.4743d24.el8
`containers-common` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 1:1.1.1-2.rhaos4.6.el8	1:1.1.1-2.rhaos4.6.el8
`podman` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:1.9.3-3.rhaos4.6.el8	0:1.9.3-3.rhaos4.6.el8
`podman-debuginfo` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:1.9.3-3.rhaos4.6.el8	0:1.9.3-3.rhaos4.6.el8
`podman-debugsource` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:1.9.3-3.rhaos4.6.el8	0:1.9.3-3.rhaos4.6.el8
`podman-docker` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:1.9.3-3.rhaos4.6.el8	0:1.9.3-3.rhaos4.6.el8
`podman-remote` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:1.9.3-3.rhaos4.6.el8	0:1.9.3-3.rhaos4.6.el8
`podman-remote-debuginfo` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:1.9.3-3.rhaos4.6.el8	0:1.9.3-3.rhaos4.6.el8
`podman-tests` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:1.9.3-3.rhaos4.6.el8	0:1.9.3-3.rhaos4.6.el8
`skopeo` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 1:1.1.1-2.rhaos4.6.el8	1:1.1.1-2.rhaos4.6.el8
`skopeo-debuginfo` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 1:1.1.1-2.rhaos4.6.el8	1:1.1.1-2.rhaos4.6.el8
`skopeo-debugsource` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 1:1.1.1-2.rhaos4.6.el8	1:1.1.1-2.rhaos4.6.el8
`skopeo-tests` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 1:1.1.1-2.rhaos4.6.el8	1:1.1.1-2.rhaos4.6.el8
`runc` Red Hat:openshift:4.6::el7 From an advisory covering 9 CVEs	before 0:1.0.0-81.rhaos4.6.git5b757d4.el7	0:1.0.0-81.rhaos4.6.git5b757d4.el7
`runc-debuginfo` Red Hat:openshift:4.6::el7 From an advisory covering 9 CVEs	before 0:1.0.0-81.rhaos4.6.git5b757d4.el7	0:1.0.0-81.rhaos4.6.git5b757d4.el7
`runc` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:1.0.0-81.rhaos4.6.git5b757d4.el8	0:1.0.0-81.rhaos4.6.git5b757d4.el8
`runc-debuginfo` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:1.0.0-81.rhaos4.6.git5b757d4.el8	0:1.0.0-81.rhaos4.6.git5b757d4.el8
`runc-debugsource` Red Hat:openshift:4.6::el8 From an advisory covering 9 CVEs	before 0:1.0.0-81.rhaos4.6.git5b757d4.el8	0:1.0.0-81.rhaos4.6.git5b757d4.el8
`jenkins-2-plugins` Red Hat:openshift:3.11::el7 From an advisory covering 3 CVEs	before 0:3.11.1603460090-1.el7	0:3.11.1603460090-1.el7

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-2252 is a medium vulnerability (CVSS 4.8) in Jenkins Mailer, published September 16, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.96%, the 61st percentile. Fixed in org.jenkins-ci.plugins:mailer 1.32.1.

References

Show 47 moreShow less