Description

Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors.

Remediation

References

https://access.redhat.com/errata/RHSA-2016:0070

https://bugzilla.redhat.com/show_bug.cgi?id=1147765

https://exchange.xforce.ibmcloud.com/vulnerabilities/96973

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01

Related Vulnerabilities

CVE-2023-24188 Vulnerability in maven package com.bstek.ureport:ureport2-core

CVE-2022-25936 Vulnerability in npm package servst

CVE-2017-16213 Vulnerability in npm package mfrserver

CVE-2020-7649 Vulnerability in npm package snyk-broker

CVE-2014-10068 Vulnerability in npm package inert

Severity

Critical

Classification

CWE-22