Lucene search
+L

5 matches found

RedHat Linux
RedHat Linux
added 2021/12/02 10:04 p.m.8 views

jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path

An incorrect permissions validation vulnerability was found in Jenkins. The operations FilePathrenameTo and FilePathmoveAllChildrenTo only check read permission on the source path which may allow an attacker who has access to these operations to be able to read and write to arbitrary files on the...

9.8CVSS5.8AI score0.02034EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/12/02 6:37 p.m.8 views

jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path

An incorrect permissions validation vulnerability was found in Jenkins. The operations FilePathrenameTo and FilePathmoveAllChildrenTo only check read permission on the source path which may allow an attacker who has access to these operations to be able to read and write to arbitrary files on the...

9.8CVSS5.8AI score0.02034EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/12/01 12:28 p.m.11 views

jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path

An incorrect permissions validation vulnerability was found in Jenkins. The operations FilePathrenameTo and FilePathmoveAllChildrenTo only check read permission on the source path which may allow an attacker who has access to these operations to be able to read and write to arbitrary files on the...

9.8CVSS5.8AI score0.02034EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/11/29 10:40 a.m.11 views

jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path

An incorrect permissions validation vulnerability was found in Jenkins. The operations FilePathrenameTo and FilePathmoveAllChildrenTo only check read permission on the source path which may allow an attacker who has access to these operations to be able to read and write to arbitrary files on the...

9.8CVSS5.8AI score0.02034EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2021/11/04 5:15 p.m.6 views

CVE-2021-21692

FilePathrenameTo and FilePathmoveAllChildrenTo in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier only check 'read' agent-to-controller access permission on the source path, instead of 'delete'...

9.8CVSS7.2AI score0.02034EPSS
SaveExploits0References2
Rows per page
Query Builder