Description

Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name.

Remediation

References

CVE-2014-2059

Related Vulnerabilities

OpenSSL Other Vulnerability (CVE-2003-0851)

Joomla! Core 3.0.x Denial of Service (3.0.0 - 3.0.3)

WordPress Plugin WP Fastest Cache Cross-Site Scripting (0.8.5.5)

WordPress Plugin WP-Download 'dl_id' Parameter SQL Injection (1.2)

WordPress Plugin IMPress for IDX Broker Cross-Site Scripting (3.0.5)

Severity

Medium

Classification

CVE-2014-2059 CWE-22

Tags

Missing Update Known Vulnerabilities