Description

An arbitrary file read vulnerability in Jenkins Google OAuth Credentials Plugin 0.9 and earlier allowed attackers able to configure jobs and credentials in Jenkins to obtain the contents of any file on the Jenkins master.

Remediation

References

https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1583

Related Vulnerabilities

CVE-2022-45935 Vulnerability in maven package org.apache.james:james-server-core

CVE-2019-10303 Vulnerability in maven package org.jenkins-ci.plugins:azure-publishersettings-credentials

CVE-2018-11093 Vulnerability in npm package @ckeditor/ckeditor5-link

CVE-2016-0783 Vulnerability in maven package org.apache.openmeetings:openmeetings-install

CVE-2020-6459 Vulnerability in maven package org.webjars.npm:electron

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Vendor Advisory NVD-CWE-Other