Jenkins < 2.121 and < 2.107.3 LTS Multiple Vulnerabilities - Linux

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...

Jenkins < 2.121 and < 2.107.3 LTS Multiple Vulnerabilities - Windows

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...

CVE-2018-1000194

CVE-2018-1000194 describes a path traversal vulnerability in Jenkins pre-2.121/2.107.3 LTS due to flaws in FilePath.java and SoloFilePathFilter.java. The issue allows unauthenticated agents to read and write arbitrary files on the Jenkins master, bypassing the agent-to-master security subsystem p...