PT-2018-9456
CVE-2018-1000601
·
تاريخ النشر
2018-06-26
·
تاريخ التحديث
2022-05-14
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Jenkins SSH Credentials Plugin versions 1.13 and earlier
Description
A vulnerability exists that allows attackers with a Jenkins account and the permission to configure credential bindings to read arbitrary files from the Jenkins master file system. This issue is related to the
BasicSSHUserPrivateKey.java file.Recommendations
For Jenkins SSH Credentials Plugin versions 1.13 and earlier, update to a version later than 1.13 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾