CVE-2019-16540

2019-11-2115:15:14

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%

JSON

A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the Jenkins master.

CPENameOperatorVersion
support-core-plugineqsupport-core-1.8
support-core-plugineqsupport-core-2.28
support-core-plugineqsupport-core-2.29
support-core-plugineqsupport-core-2.36
support-core-plugineqsupport-core-2.20
support-core-plugineqsupport-core-2.12
support-core-plugineqsupport-core-2.17
support-core-plugineqsupport-core-2.60
support-core-plugineqsupport-core-2.4
support-core-plugineqsupport-core-2.40

Name	Operator	Version
support-core-plugin	eq	support-core-1.8
support-core-plugin	eq	support-core-2.28
support-core-plugin	eq	support-core-2.29
support-core-plugin	eq	support-core-2.36
support-core-plugin	eq	support-core-2.20
support-core-plugin	eq	support-core-2.12
support-core-plugin	eq	support-core-2.17
support-core-plugin	eq	support-core-2.60
support-core-plugin	eq	support-core-2.4
support-core-plugin	eq	support-core-2.40