CVE-2014-2059: Path Traversal
Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.jenkins-ci.main:jenkins-coreto a version that resolves this vulnerability.Fixed in 1.532.2 - Upgrade
Upgrade
maven/org.jenkins-ci.main:jenkins-coreto a version that resolves this vulnerability.Fixed in 1.551
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2059?
CVE-2014-2059 has a high severity rating due to its potential to allow authenticated remote users to overwrite arbitrary files.
How do I fix CVE-2014-2059?
To address CVE-2014-2059, upgrade Jenkins to version 1.551 or later, or to LTS version 1.532.2 or later.
What systems are affected by CVE-2014-2059?
CVE-2014-2059 affects Jenkins versions prior to 1.551 and LTS versions prior to 1.532.2.
Who can exploit CVE-2014-2059?
CVE-2014-2059 can be exploited by remote authenticated users who have access to the Jenkins CLI.
What does CVE-2014-2059 allow an attacker to do?
CVE-2014-2059 allows an attacker to overwrite arbitrary files on the server via crafted job names.