Chaos Monkey

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-03	CVE-2020-2323	Missing Authorization vulnerability in Netflix Chaos Monkey 0.3/0.4 Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read permission to access the Chaos Monkey page and to see the history of actions. network low complexity netflix CWE-862	5.3
2020-12-03	CVE-2020-2322	Missing Authorization vulnerability in Netflix Chaos Monkey 0.3 Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to generate load and to generate memory leaks. network low complexity netflix CWE-862	7.5