File Access Through Directory Traversal

2018-04-0606:26:51

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

28.6%

JSON

copy-to-slave plugin is vulnerable to file access through directory traversal. The application allows users to with job configuration permissions to read arbitrary files on the Jenkins master file system.

CPENameOperatorVersion
copy to slave plugineq1.4.1-h-1
copy to slave pluginle1.2.3

CPE	Name	Operator	Version
	copy to slave plugin	eq	1.4.1-h-1
	copy to slave plugin	le	1.2.3

References

jenkins.io/security/advisory/2018-03-26/#SECURITY-545

0.001 Low

EPSS

Percentile

28.6%

JSON

Related for VERACODE:6060