Description
Directory traversal vulnerability in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directory contents and read arbitrary files in the Jenkins servlet resources via directory traversal sequences in a request to jnlpJars/.
Remediation
References
http://rhn.redhat.com/errata/RHSA-2016-0489.html
https://access.redhat.com/errata/RHSA-2016:0070
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
Related Vulnerabilities
CVE-2023-37476 Vulnerability in maven package org.openrefine:main
CVE-2023-49145 Vulnerability in maven package org.apache.nifi:nifi-jolt-transform-json-ui
CVE-2018-8088 Vulnerability in maven package org.slf4j:slf4j-ext
CVE-2014-3623 Vulnerability in maven package org.apache.wss4j:wss4j
CVE-2018-14658 Vulnerability in maven package org.keycloak:keycloak-services