Travis Emmert

The issue allows attackers to read arbitrary files using the file browser for workspaces and archived artifacts by following symlinks. This is possible because the file browser for workspaces, archived artifacts, and `$JENKINS HOME/userContent/` follows symbolic links to locations outside the directory being browsed. Attackers with Job/Workspace permission and the ability to control workspace contents can create symbolic links to access files outside workspaces using the workspace browser.

The issue concerns an undocumented account, specifically the OpenDS admin, which has a default password. This allows a remote attacker who knows the default password to log in and gain administrator privileges to the local LDAP directory server.

The issue arises from improper handling of zero values of a packet length in the DNP3 protocol analyzer, allowing remote attackers to cause a denial of service. This can result in a buffer overflow or buffer over-read if NDEBUG is defined; otherwise, it leads to an assertion failure. The attack is facilitated by a crafted DNP3 packet.

The issue allows remote attackers to cause a denial of service, potentially leading to a buffer overflow or buffer over-read, by sending a crafted DNP3 packet with certain non-zero values of a packet length.

The issue allows remote authenticated users to read arbitrary files, send TCP requests to intranet servers, or cause a denial of service. This is related to an XML External Entity (XXE) issue, which occurs when an XML external entity declaration is used in conjunction with an entity reference.