CVE-2016-4986

2017-02-0915:59:01

Google

osv.dev

7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON

Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter.

CPENameOperatorVersion
tap-plugineqtap-1.2.6
tap-plugineqtap-1.12
tap-plugineqtap-1.24
tap-plugineqtap-1.1
tap-plugineqtap-1.9
tap-plugineqtap-1.20
tap-plugineqtap-1.2.1
tap-plugineqtap-1.5
tap-plugineqtap-1.11
tap-plugineqtap-1.0

Name	Operator	Version
tap-plugin	eq	tap-1.2.6
tap-plugin	eq	tap-1.12
tap-plugin	eq	tap-1.24
tap-plugin	eq	tap-1.1
tap-plugin	eq	tap-1.9
tap-plugin	eq	tap-1.20
tap-plugin	eq	tap-1.2.1
tap-plugin	eq	tap-1.5
tap-plugin	eq	tap-1.11
tap-plugin	eq	tap-1.0