Description

Directory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with certain permissions to read arbitrary files via a symlink, related to building artifacts.

Remediation

References

CVE-2015-1807

Related Vulnerabilities

WordPress Plugin WordPress Infinite Scroll-Ajax Load More Directory Traversal (5.5.4)

WordPress Plugin Dynamic Featured Image Unspecified Vulnerability (1.0.3)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.25)

PostgreSQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-1899)

PHP Use After Free Vulnerability (CVE-2016-9936)

Severity

Low

Classification

CVE-2015-1807 CWE-22

Tags

Missing Update Known Vulnerabilities