CVE-2018-1000148 - An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system

Back Back to CVE browser

MEDIUM

An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system

Published Apr 5, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 0.97%

Description

An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3404
Advisory
https://github.com/advisories/GHSA-9jrh-hch8-rr5c
Advisory
https://jenkins.io/security/advisory/2018-03-26/#SECURITY-545
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1000148

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3404		Advisory
https://github.com/advisories/GHSA-9jrh-hch8-rr5c		Advisory
https://jenkins.io/security/advisory/2018-03-26/#SECURITY-545		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1000148