CVE-2018-6356
Medium
Description
Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins master they should not have access to. On Windows, any file accessible to the Jenkins master process could be downloaded. On other operating systems, any file within the Jenkins home directory accessible to the Jenkins master process could be downloaded.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Jenkins
PublishedFeb 20, 2018
First seenFeb 20, 2018
How to fix
Update
- jenkins jenkins2.107, 2.89.4 or later
- org.jenkins-ci.main:jenkins-core2.89.4, 2.107 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jenkins jenkins | v < 2.107, v < 2.89.4 | 2.107, 2.89.4 |
| oracle communications_cloud_native_core_automated_test_suite | 1.9.0 | — |
| org.jenkins-ci.main:jenkins-coreMaven | v < 2.89.4, 2.90 ≤ v < 2.107 | 2.89.4, 2.107 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.