Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2022/05/14 3:05 a.m.•30 views

Arbitrary file write vulnerability in Jenkins Fortify CloudScan Plugin

A arbitrary file write vulnerability exists in Jenkins Fortify CloudScan Plugin 1.5.1 and earlier in ArchiveUtil.java that allows attackers able to control rulepack zip file contents to overwrite any file on the Jenkins master file system, only limited by the permissions of the user the Jenkins...

6.5CVSS6.8AI score0.00852EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/05/14 3:05 a.m.•133 views

GHSA-8864-PWHG-3MP2 Arbitrary file write vulnerability in Jenkins Fortify CloudScan Plugin

A arbitrary file write vulnerability exists in Jenkins Fortify CloudScan Plugin 1.5.1 and earlier in ArchiveUtil.java that allows attackers able to control rulepack zip file contents to overwrite any file on the Jenkins master file system, only limited by the permissions of the user the Jenkins...

6.5CVSS6.4AI score0.00852EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/26 12:00 a.m.•2 views

CVE-2018-1000607: Improper Input Validation

A arbitrary file write vulnerability exists in Jenkins Fortify CloudScan Plugin 1.5.1 and earlier in ArchiveUtil.java that allows attackers able to control rulepack zip file contents to overwrite any file on the Jenkins master file system, only limited by the permissions of the user the Jenkins...

6.5CVSS6.7AI score0.00852EPSS
SaveExploits0References2
Rows per page
Query Builder