Description

A path traversal vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in FilePath.java, SoloFilePathFilter.java that allows malicious agents to read and write arbitrary files on the Jenkins master, bypassing the agent-to-master security subsystem protection.

Remediation

References

CVE-2018-1000194

Related Vulnerabilities

Ampache Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-51487)

WebLogic Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1324)

WordPress Plugin Age Gate Cross-Site Scripting (2.16.3)

IBMHttpServer Other Vulnerability (CVE-2000-0505)

WordPress Plugin Soundy Background Music Cross-Site Scripting (3.1)

Severity

High

Classification

CVE-2018-1000194 CWE-22 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities