PT-2018-15187 · Cloudbees+1 · Jenkins

Publicado 2018-07-23 · Atualizado 2022-06-13 · CVE-2018-1999002

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.132 Jenkins versions 2.121.1 and earlier

Description A file read issue exists in the Stapler web framework's org/kohsuke/stapler/Stapler.java, allowing attackers to send crafted HTTP requests to return the contents of any file on the Jenkins master file system that the Jenkins master has access to.

Recommendations For Jenkins versions prior to 2.132, update to a version later than 2.132 to resolve the issue. For Jenkins versions 2.121.1 and earlier, update to a version later than 2.121.1 to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-1999002

GHSA-QF38-F2FR-Q4X9

Produtos afetados

Jenkins

Referências · 11

• 🔥 https://github.com/wetw0rk/Exploit-Development · Exploit
• 🔥 https://exploit-db.com/exploits/46453 · Exploit
• 🔥❌ https://github.com/0xtavian/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins · Exploit, Deleted
• https://github.com/jenkinsci/jenkins · Nota
• https://github.com/jenkinsci/jenkins/commit/29ca81dd59c255ad633f1bd86cf1be40a5f02c64 · Nota
• https://github.com/jenkinsci/stapler/commit/8e9679b08c36a2f0cf2a81855d5e04e2ed2ac2b3 · Nota
• https://osv.dev/vulnerability/CVE-2018-1999002 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1999002 · Nota de Segurança
• https://oracle.com/security-alerts/cpuapr2022.html · Correção
• https://jenkins.io/security/advisory/2018-07-18/#SECURITY-914 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-qf38-f2fr-q4x9 · Aviso do Fabricante