Description

An arbitrary file read vulnerability in Jenkins File System SCM Plugin 2.1 and earlier allows attackers able to configure jobs in Jenkins to obtain the contents of any file on the Jenkins master.

Remediation

References

http://www.openwall.com/lists/oss-security/2019/08/07/1

https://jenkins.io/security/advisory/2019-08-07/#SECURITY-569

Related Vulnerabilities

CVE-2022-34662 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-api

CVE-2022-28367 Vulnerability in maven package org.owasp.antisamy:antisamy

CVE-2007-5333 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

CVE-2019-10383 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2021-46708 Vulnerability in npm package swagger-ui-dist

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Mailing List Third Party Advisory Vendor Advisory NVD-CWE-Other