CVE-2018-1000194: Path Traversal

First published: Tue Jun 05 2018(Updated: )

A path traversal vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in FilePath.java, SoloFilePathFilter.java that allows malicious agents to read and write arbitrary files on the Jenkins master, bypassing the agent-to-master security subsystem protection.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/references
• agent/type
• agent/last-modified-date
• agent/first-publish-date
• collector/nvd-index
• agent/software-canonical-lookup-request
• agent/remedy
• agent/author
• agent/weakness
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/description
• agent/event
• collector/mitre-cve
• source/MITRE
• vendor/jenkins
• canonical/jenkins jenkins
• version/jenkins jenkins/2.120
• version/jenkins jenkins/2.107.2
• vendor/oracle
• canonical/oracle communications cloud native core automated test suite
• version/oracle communications cloud native core automated test suite/1.9.0