CVE-2018-1000862

An information exposure vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allows attackers with the ability to control build output to browse the file system on agents running builds beyond the duration of the build using the workspace browser.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*
cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*

Configuration 2 (hide)

cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-12-10 14:29

Updated : 2024-02-04 20:03


NVD link : CVE-2018-1000862

Mitre link : CVE-2018-1000862

CVE.ORG link : CVE-2018-1000862


JSON object : View

Products Affected

jenkins

  • jenkins

redhat

  • openshift_container_platform
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor