CVE-2020-2322: 
Java vulnerability analysis and mitigation

CVE-2020-2322 is a security vulnerability discovered in the Jenkins Chaos Monkey Plugin version 0.3 and earlier, disclosed on December 3, 2020. The vulnerability affects the permission checks in several HTTP endpoints of the plugin (Jenkins Advisory, CVE Mitre).

The vulnerability is classified with a Medium severity CVSS score. The core issue stems from the plugin's failure to perform adequate permission checks in several HTTP endpoints, which could allow attackers with Overall/Read permission to perform unauthorized actions (Jenkins Advisory).

The vulnerability allows attackers with Overall/Read permission to generate load and to generate memory leaks in the Jenkins system, potentially affecting system performance and stability (Jenkins Advisory, OSS Security).

The vulnerability can be exploited by attackers who have Overall/Read permission in the Jenkins system. The attack vector is through the HTTP endpoints that lack proper permission checks (Jenkins Advisory).

The vulnerability has been fixed in Chaos Monkey Plugin version 0.4, which implements proper permission checks requiring Overall/Administer permission to generate load and memory leaks. Users are advised to update to this version or later to mitigate the vulnerability (Jenkins Advisory).