Lucene search
GoogleOSV:GHSA-4JHM-5F7G-75FPHistoryMay 13, 2022 - 1:48 a.m.
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
2022-05-1301:48:39
Google
osv.dev
14
0.006 Low
EPSS
Percentile
78.4%
A data modification vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in User.java, IdStrategy.java that allows attackers to submit crafted user names that can cause an improper migration of user record storage formats, potentially preventing the victim from logging into Jenkins.
References
www.securityfocus.com/bid/106176
access.redhat.com/errata/RHBA-2019:0024
github.com/jenkinsci/jenkins
github.com/jenkinsci/jenkins/commit/4ed66e5838476e575a83c3cd13fffb37eefa2f48
github.com/jenkinsci/jenkins/commit/7bae6dd6ef23af988801d38dc0f8f693bc6283f8
jenkins.io/security/advisory/2018-12-05/#SECURITY-1072
nvd.nist.gov/vuln/detail/CVE-2018-1000863
www.tenable.com/security/research/tra-2018-43
Related
cve
cve
CVE-2018-1000863
2018-12-10 14:29:01
github
github
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
2022-05-13 01:48:39
osv
osv
CVE-2018-1000863
2018-12-10 14:29:01
cvelist
cvelist
CVE-2018-1000863
2018-12-10 14:00:00
redhatcve
redhatcve
CVE-2018-1000863
2020-04-04 05:19:40
veracode
veracode
Denial Of Service (DoS)
2019-05-16 03:23:57
prion
prion
Design/Logic Flaw
2018-12-10 14:29:00
nvd
nvd
CVE-2018-1000863
2018-12-10 14:29:01
openvas
openvas
Jenkins < 2.154 and < 2.138.4 LTS Multiple Vulnerabilities - Windows
2018-12-11 00:00:00
Jenkins < 2.154 and < 2.138.4 LTS Multiple Vulnerabilities - Linux
2018-12-11 00:00:00
nessus
nessus
Jenkins < 2.138.4 LTS / 2.150.1 LTS / 2.154 Multiple Vulnerabilities
2018-12-07 00:00:00