← Volver a CVEs

CVE-2018-1000068

MEDIUM

5.3

Descripcion

An improper input validation vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to access plugin resource files in the META-INF and WEB-INF directories that should not be accessible, if the Jenkins home directory is on a case-insensitive file system.

Detalles CVE

Puntuacion CVSS v3.15.3

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado2/16/2018

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

jenkins:jenkinsoracle:communications_cloud_native_core_automated_test_suite

Debilidades (CWE)

CWE-200

Referencias

http://www.securityfocus.com/bid/103101(cve@mitre.org)

https://jenkins.io/security/advisory/2018-02-14/#SECURITY-717(cve@mitre.org)

https://www.oracle.com/security-alerts/cpuapr2022.html(cve@mitre.org)

http://www.securityfocus.com/bid/103101(af854a3a-2127-422b-91ae-364da2661108)

https://jenkins.io/security/advisory/2018-02-14/#SECURITY-717(af854a3a-2127-422b-91ae-364da2661108)

https://www.oracle.com/security-alerts/cpuapr2022.html(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.