CVE-2019-1003000_RCE-DETECTION

CVE-2019-1003000RCE-DETECTION General Summary Chaining vulnerability CVE-2018-1000861 with CVE-2019-1003000, I created a module to test for a Pre-Auth RCE on Jenkins CI. Initially, I had tried to go about detecting the vulnerability with a username and password and job name; however, I thought it...

org.jenkins-ci.main:jenkins-test-harness (1.433), org.jenkins-ci.main:jenkins-war (1.433) +6 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.433)

org.jenkins-ci.main:jenkins-core MAVEN version 1.433 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.433 - org.jenkins-ci.main:jenkins-war 1.433 -...

org.jenkins-ci.main:jenkins-test-harness (1.475), org.jenkins-ci.main:jenkins-war (1.475) +7 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.475)

org.jenkins-ci.main:jenkins-core MAVEN version 1.475 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.475 - org.jenkins-ci.main:jenkins-war 1.475 -...

net.praqma:memory-map (>=0.1.0, <=0.1.2), org.jenkins-ci.main:jenkins-test-harness (1.484) +7 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.484)

org.jenkins-ci.main:jenkins-core MAVEN version 1.484 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:memory-map =0.1.0, =0.36, =0.37 - org.jenkins-ci.plugins:viewvc 1.7 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (1.641), org.jenkins-ci.main:jenkins-war (1.641) +2 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.641)

org.jenkins-ci.main:jenkins-core MAVEN version 1.641 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.641 - org.jenkins-ci.main:jenkins-war 1.641 -...

org.jenkins-ci.main:jenkins-test-harness (1.462), org.jenkins-ci.main:jenkins-war (1.462) +6 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.462)

org.jenkins-ci.main:jenkins-core MAVEN version 1.462 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.462 - org.jenkins-ci.main:jenkins-war 1.462 -...

net.praqma:logging (>=0.2.0, <=0.2.8), org.jenkins-ci.main:jenkins-test-harness (1.483) +4 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.483)

org.jenkins-ci.main:jenkins-core MAVEN version 1.483 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:logging =0.2.0, =0.2.8 - org.jenkins-ci.main:jenkins-test-harness 1.483 -...

com.thalesgroup.jenkins-ci.plugins:scons (0.4), net.praqma:matrix-reloaded (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.413)

org.jenkins-ci.main:jenkins-core MAVEN version 1.413 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:scons 0.4 - net.praqma:matrix-reloaded =1.0.0, =1.17, =0.5,...

org.jenkins-ci.main:jenkins-test-harness (1.477), org.jenkins-ci.main:jenkins-war (1.477) +7 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.477)

org.jenkins-ci.main:jenkins-core MAVEN version 1.477 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.477 - org.jenkins-ci.main:jenkins-war 1.477 -...

org.jenkins-ci.main:jenkins-test-harness (1.560), org.jenkins-ci.main:jenkins-war (1.560) +6 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.560)

org.jenkins-ci.main:jenkins-core MAVEN version 1.560 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.560 - org.jenkins-ci.main:jenkins-war 1.560 -...

org.jenkins-ci.main:jenkins-test-harness (1.554.3.jenkins-18065-allrm-all), org.jenkins-ci.main:jenkins-war (1.554.3.jenkins-18065-allrm-all) +1 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.554.3.jenkins-18065-allrm-all)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3.jenkins-18065-allrm-all is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness...

org.jenkins-ci.main:jenkins-test-harness (1.414), org.jenkins-ci.main:jenkins-war (1.414) +5 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.414)

org.jenkins-ci.main:jenkins-core MAVEN version 1.414 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.414 - org.jenkins-ci.main:jenkins-war 1.414 -...

net.sleepymouse.jenkins.plugins:rpi-build-status (0.7), org.jenkins-ci.main:jenkins-war (1.658) +2 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.658)

org.jenkins-ci.main:jenkins-core MAVEN version 1.658 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.sleepymouse.jenkins.plugins:rpi-build-status 0.7 - org.jenkins-ci.main:jenkins-war 1.658 -...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.3.7, <=0.3.15), com.cloudbees.jenkins.plugins:amazon-ecr (1.6) +27 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.642.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.3.7, =2.0.0, =1.0, =1.3.1, =1.6.0...

com.aliyun.www:aliyun-container-service-deploy (>=0.1.0, <=0.1.1), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +15 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.651.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aliyun.www:aliyun-container-service-deploy =0.1.0, =y, =1.0.4, =1.004, =1.0, =1.0.6,...

org.jenkins-ci.main:jenkins-test-harness (1.489), org.jenkins-ci.main:jenkins-war (1.489) +9 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.489)

org.jenkins-ci.main:jenkins-core MAVEN version 1.489 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.489 - org.jenkins-ci.main:jenkins-war 1.489 -...

org.jenkins-ci.main:jenkins-test-harness (1.505), org.jenkins-ci.main:jenkins-war (1.505) +6 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.505)

org.jenkins-ci.main:jenkins-core MAVEN version 1.505 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.505 - org.jenkins-ci.main:jenkins-war 1.505 -...

org.jenkins-ci.main:jenkins-test-harness (1.584), org.jenkins-ci.main:jenkins-war (1.584) +1 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.584)

org.jenkins-ci.main:jenkins-core MAVEN version 1.584 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.584 - org.jenkins-ci.main:jenkins-war 1.584 -...

org.jenkins-ci.main:jenkins-test-harness (1.636), org.jenkins-ci.main:jenkins-war (1.636) +1 more potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.636)

org.jenkins-ci.main:jenkins-core MAVEN version 1.636 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.636 - org.jenkins-ci.main:jenkins-war 1.636 -...

org.jenkins-ci.main:jenkins-war (1.509.2.jenkins-8856-diag), org.jenkins-ci.main:maven-plugin (1.509.2.jenkins-8856-diag) potentially affected by CVE-2018-1000861 via org.jenkins-ci.main:jenkins-core (1.509.2.jenkins-8856-diag)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.2.jenkins-8856-diag is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.509.2.jenkins-8856-diag -...