Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-79870
HistoryMar 17, 2022 - 12:00 a.m.

Jenkins Kubernetes Continuous Deploy Plugin Path Traversal Vulnerability

2022-03-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
jenkins
kubernetes
continuous deploy
plugin
path traversal
vulnerability
credentials
arbitrary files
jenkins controller
attacker

EPSS

0.001

Percentile

49.1%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.The Jenkins Kubernetes Continuous Deploy Plugin is vulnerable to a path traversal vulnerability that could be exploited by an attacker with credentials/create privileges to read arbitrary files on the Jenkins controller.

EPSS

0.001

Percentile

49.1%

Related for CNVD-2022-79870