Lucene search
GoogleOSV:GHSA-HPH9-9VCQ-F7GPHistoryMay 14, 2022 - 1:04 a.m.
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
2022-05-1401:04:36
Google
osv.dev
19
information exposure
jenkins
vulnerability
directorybrowsersupport
build output
file system
unauthorized access
EPSS
0.001
Percentile
34.9%
An information exposure vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allows attackers with the ability to control build output to browse the file system on agents running builds beyond the duration of the build using the workspace browser.
Related
prion
prion
Information disclosure
2018-12-10 14:29:00
nvd
nvd
CVE-2018-1000862
2018-12-10 14:29:01
cvelist
cvelist
CVE-2018-1000862
2018-12-10 14:00:00
redhatcve
redhatcve
CVE-2018-1000862
2019-11-04 03:43:20
veracode
veracode
Information Disclosure
2019-05-16 03:23:56
osv
osv
CVE-2018-1000862
2018-12-10 14:29:01
Arbitrary file read vulnerability in workspace browsers in Jenkins
2022-05-24 17:39:12
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
2022-05-14 01:04:36
Arbitrary file read vulnerability in workspace browsers in Jenkins
2022-05-24 17:39:12
cve
cve
CVE-2018-1000862
2018-12-10 14:29:01
openvas
openvas
Jenkins < 2.154 and < 2.138.4 LTS Multiple Vulnerabilities - Linux
2018-12-11 00:00:00
Jenkins < 2.154 and < 2.138.4 LTS Multiple Vulnerabilities - Windows
2018-12-11 00:00:00
nessus
nessus
Jenkins < 2.138.4 LTS / 2.150.1 LTS / 2.154 Multiple Vulnerabilities
2018-12-07 00:00:00