Description

A path traversal vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in FilePath.java, SoloFilePathFilter.java that allows malicious agents to read and write arbitrary files on the Jenkins master, bypassing the agent-to-master security subsystem protection.

Remediation

References

CVE-2018-1000194

Related Vulnerabilities

WordPress Plugin Share Woocommerce to Email Cross-Site Scripting (1.0.1)

WordPress Plugin Simple Fields Cross-Site Scripting (1.4.11)

MySQL CVE-2019-2830 Vulnerability (CVE-2019-2830)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-0237)

WordPress Plugin Crelly Slider Multiple Unspecified Vulnerabilities (1.1.1)

Severity

High

Classification

CVE-2018-1000194 CWE-22 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities