Description
Jenkins 2.423 and earlier, LTS 2.414.1 and earlier creates a temporary file in the system temporary directory with the default permissions for newly created files when installing a plugin from a URL, potentially allowing attackers with access to the system temporary directory to replace the file before it is installed in Jenkins, potentially resulting in arbitrary code execution.
Remediation
References
Related Vulnerabilities
Plone CMS Resource Management Errors Vulnerability (CVE-2013-4188)
Oracle Database Server CVE-2014-6453 Vulnerability (CVE-2014-6453)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4285)
Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-2749)