Description
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system.
Remediation
References
https://jenkins.io/security/advisory/2018-03-26/#SECURITY-545
Related Vulnerabilities
CVE-2021-20334 Vulnerability in npm package mongodb-js-metrics
CVE-2014-0110 Vulnerability in maven package org.apache.cxf:cxf-bundle-minimal
CVE-2018-1999029 Vulnerability in maven package org.jenkins-ci.plugins:shelve-project-plugin
CVE-2020-5408 Vulnerability in maven package org.springframework.security:spring-security-crypto
CVE-2022-23712 Vulnerability in maven package org.elasticsearch:elasticsearch