CVE-2018-1000148

2018-04-0513:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

28.6%

JSON

An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system.

CPENameOperatorVersion
copy-to-slave-plugineqcopy-to-slave-1.4.4
copy-to-slave-plugineqcopy-to-slave-1.4.1
copy-to-slave-plugineqcopy-to-slave-1.4.3

Name	Operator	Version
copy-to-slave-plugin	eq	copy-to-slave-1.4.4
copy-to-slave-plugin	eq	copy-to-slave-1.4.1
copy-to-slave-plugin	eq	copy-to-slave-1.4.3

References

jenkins.io/security/advisory/2018-03-26/#SECURITY-545

0.001 Low

EPSS

Percentile

28.6%

JSON

Related for OSV:CVE-2018-1000148