13 matches found
EUVD-2022-3404
Malicious code in bioql PyPI...
SUSE CVE-2018-1000148
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
GHSA-9JRH-HCH8-RR5C Jenkins Copy To Slave Plugin allows access to arbitrary files on the Jenkins controller file system
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
com.amcbridge:build-configurator (>=1.0.5.0, <=1.0.6.1), com.piketec.jenkins.plugins:piketec-tpt (>=7.0, <=7.8) +3 more potentially affected by CVE-2018-1000148 via org.jenkins-ci.plugins:copy-to-slave (>=1.4, <=1.4.4)
org.jenkins-ci.plugins:copy-to-slave MAVEN version =1.4, =1.0.5.0, =7.0, =1.1, =1.140, =1.144 Source cves: CVE-2018-1000148 Source advisory: OSV:GHSA-9JRH-HCH8-RR5C...
com.amcbridge:build-configurator (>=1.0.5.0, <=1.0.6.1), com.piketec.jenkins.plugins:piketec-tpt (>=7.0, <=7.8) +3 more potentially affected by CVE-2018-1000148 via org.jenkins-ci.plugins:copy-to-slave (>=1.4, <=1.4.4)
org.jenkins-ci.plugins:copy-to-slave MAVEN version =1.4, =1.0.5.0, =7.0, =1.1, =1.140, =1.144 Source cves: CVE-2018-1000148 Source advisory: GHSA-9JRH-HCH8-RR5C...
CVE-2018-1000148
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
CVE-2018-1000148
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
CVE-2018-1000148
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
CVE-2018-1000148
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
CVE-2018-1000148
The CVE-2018-1000148 entry concerns the Jenkins Copy To Slave Plugin, affected version 1.4.4 and earlier. The vulnerability is in CopyToSlaveBuildWrapper.java, enabling attackers with permissions to configure jobs to read arbitrary files from the Jenkins master filesystem. The connected sources c...
CVE-2018-1000148: Exposure of Sensitive Information to an Unauthorized Actor
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
PT-2018-9320
Name of the Vulnerable Software and Affected Versions Jenkins Copy To Slave Plugin versions 1.4.4 and older Description A sensitive information exposure issue exists, allowing attackers with job configuration permissions to read arbitrary files from the Jenkins master file system. This is due to ...
Copy To Slave Plugin allows access to arbitrary files on the Jenkins controller file system
Copy To Slave Plugin allows users with Job/Configure permissions to configure it in such a way that it allows obtaining arbitrary files accessible to the Jenkins controller process from the Jenkins controller file system. As of publication of this advisory, there is no fix...