Description
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system.
Remediation
References
https://jenkins.io/security/advisory/2018-03-26/#SECURITY-545
Related Vulnerabilities
CVE-2019-11284 Vulnerability in maven package io.projectreactor.netty:reactor-netty
CVE-2017-15703 Vulnerability in maven package org.apache.nifi:nifi-security-utils
CVE-2023-30520 Vulnerability in maven package org.jenkins-ci.plugins:quayio-trigger
CVE-2022-43766 Vulnerability in maven package org.apache.iotdb:tsfile
CVE-2020-2166 Vulnerability in maven package de.taimos:pipeline-aws