PT-2018-15187 · Cloudbees+1 · Jenkins

Published 2018-07-23 · Updated 2022-06-13 · CVE-2018-1999002

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.132 Jenkins versions 2.121.1 and earlier

Description A file read issue exists in the Stapler web framework's org/kohsuke/stapler/Stapler.java, allowing attackers to send crafted HTTP requests to return the contents of any file on the Jenkins master file system that the Jenkins master has access to.

Recommendations For Jenkins versions prior to 2.132, update to a version later than 2.132 to resolve the issue. For Jenkins versions 2.121.1 and earlier, update to a version later than 2.121.1 to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-1999002

GHSA-QF38-F2FR-Q4X9

Affected Products

Jenkins

References · 11

• 🔥 https://github.com/wetw0rk/Exploit-Development · Exploit
• 🔥 https://exploit-db.com/exploits/46453 · Exploit
• 🔥❌ https://github.com/0xtavian/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2018-1999002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1999002 · Security Note
• https://oracle.com/security-alerts/cpuapr2022.html · Patch
• https://jenkins.io/security/advisory/2018-07-18/#SECURITY-914 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qf38-f2fr-q4x9 · Vendor Advisory
• https://github.com/jenkinsci/jenkins · Note
• https://github.com/jenkinsci/jenkins/commit/29ca81dd59c255ad633f1bd86cf1be40a5f02c64 · Note
• https://github.com/jenkinsci/stapler/commit/8e9679b08c36a2f0cf2a81855d5e04e2ed2ac2b3 · Note