CVE-2019-1003000_RCE-DETECTION

CVE-2019-1003000RCE-DETECTION General Summary Chaining vulnerability CVE-2018-1000861 with CVE-2019-1003000, I created a module to test for a Pre-Auth RCE on Jenkins CI. Initially, I had tried to go about detecting the vulnerability with a username and password and job name; however, I thought it...

com.cloudbees.jenkins.plugins:custom-tools-plugin (>=0.3, <=0.4.4), com.datical.integration.jenkins:datical-db-plugin (>=1.0.3, <=1.0.35) +47 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.480.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.480.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin =0.3, =1.0.3, =1.0.0, =0.1, =0.1, =0.1.0,...

org.jenkins-ci.main:jenkins-test-harness (1.443), org.jenkins-ci.main:jenkins-war (1.443) +4 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.443)

org.jenkins-ci.main:jenkins-core MAVEN version 1.443 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.443 - org.jenkins-ci.main:jenkins-war 1.443 -...

org.jenkins-ci.main:jenkins-war (1.656), org.jenkins-ci.main:test (1.656) potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.656)

org.jenkins-ci.main:jenkins-core MAVEN version 1.656 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.656 - org.jenkins-ci.main:test 1.656 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (1.433), org.jenkins-ci.main:jenkins-war (1.433) +6 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.433)

org.jenkins-ci.main:jenkins-core MAVEN version 1.433 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.433 - org.jenkins-ci.main:jenkins-war 1.433 -...

org.jenkins-ci.main:jenkins-test-harness (1.439), org.jenkins-ci.main:jenkins-war (1.439) +6 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.439)

org.jenkins-ci.main:jenkins-core MAVEN version 1.439 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.439 - org.jenkins-ci.main:jenkins-war 1.439 -...

com.brianfromoregon:caliper-ci (2.2), com.unitedinternet.jenkins.plugins.jobtemplates:jobtemplates (1.0) +13 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.424.6)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.brianfromoregon:caliper-ci 2.2 -...

org.jenkins-ci.main:jenkins-war (1.532.2.jenkins-21622-diag) potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.532.2.jenkins-21622-diag)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.2.jenkins-21622-diag is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.532.2.jenkins-21622-diag Source cves:...

org.jenkins-ci.main:jenkins-war (1.648), org.jenkins-ci.main:test (1.648) +3 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.648)

org.jenkins-ci.main:jenkins-core MAVEN version 1.648 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.648 - org.jenkins-ci.main:test 1.648 -...

org.jenkins-ci.main:jenkins-test-harness (1.580.2), org.jenkins-ci.main:jenkins-war (1.580.2) +3 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.580.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.580.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.580.2 - org.jenkins-ci.main:jenkins-war 1.580.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.468)

org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...

org.jenkins-ci.main:jenkins-test-harness (1.438), org.jenkins-ci.main:jenkins-war (1.438) +6 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.438)

org.jenkins-ci.main:jenkins-core MAVEN version 1.438 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.438 - org.jenkins-ci.main:jenkins-war 1.438 -...

org.jenkins-ci.main:jenkins-test-harness (1.473), org.jenkins-ci.main:jenkins-war (1.473) +5 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.473)

org.jenkins-ci.main:jenkins-core MAVEN version 1.473 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.473 - org.jenkins-ci.main:jenkins-war 1.473 -...

org.jenkins-ci.main:jenkins-war (1.532.2.jenkins-22395-diag) potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.532.2.jenkins-22395-diag)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.2.jenkins-22395-diag is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.532.2.jenkins-22395-diag Source cves:...

com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.548) +7 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.548)

org.jenkins-ci.main:jenkins-core MAVEN version 1.548 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.moded.extendedchoiceparameter:dynamicextendedchoiceparameter =1.0.0, =4.3, =4.6.1 -...

com.aliyun.www:aliyun-container-service-deploy (>=0.1.0, <=0.1.1), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +15 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.651.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aliyun.www:aliyun-container-service-deploy =0.1.0, =y, =1.0.4, =1.004, =1.0, =1.0.6,...

org.jenkins-ci.main:jenkins-test-harness (1.489), org.jenkins-ci.main:jenkins-war (1.489) +9 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.489)

org.jenkins-ci.main:jenkins-core MAVEN version 1.489 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.489 - org.jenkins-ci.main:jenkins-war 1.489 -...

org.jenkins-ci.main:jenkins-test-harness (1.565.1.jenkins-22395-droplinks), org.jenkins-ci.main:jenkins-war (1.565.1.jenkins-22395-droplinks) potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.565.1.jenkins-22395-droplinks)

org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1.jenkins-22395-droplinks is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness...

org.jenkins-ci.main:jenkins-test-harness (1.505), org.jenkins-ci.main:jenkins-war (1.505) +6 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.505)

org.jenkins-ci.main:jenkins-core MAVEN version 1.505 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.505 - org.jenkins-ci.main:jenkins-war 1.505 -...

org.jenkins-ci.main:jenkins-test-harness (1.633), org.jenkins-ci.main:jenkins-war (1.633) +1 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.633)

org.jenkins-ci.main:jenkins-core MAVEN version 1.633 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.633 - org.jenkins-ci.main:jenkins-war 1.633 -...