PT-2019-11771
CVE-2019-10375
·
Publicado
2019-08-07
·
Atualizado
2023-10-25
Descrição por
CVSS 3.1
6.5
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Jenkins File System SCM Plugin version 2.1 and earlier
Description
The issue allows attackers who can configure jobs in Jenkins to read the contents of any file on the Jenkins master. This is due to an arbitrary file read vulnerability.
Recommendations
For Jenkins File System SCM Plugin version 2.1 and earlier, update to a version later than 2.1 to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾