PT-2019-11751 · Jenkins · Jenkins

Conor Oneill · Published 2019-07-17 · Updated 2023-10-25 · CVE-2019-10352

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.185 and earlier Jenkins LTS versions 2.176.1 and earlier

Description A path traversal issue allows attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory. This results in an arbitrary file write on the Jenkins master when scheduling a build. The issue is related to the core/src/main/java/hudson/model/FileParameterValue.java file.

Recommendations For Jenkins versions 2.185 and earlier, update to a version that includes the fix for this issue. For Jenkins LTS versions 2.176.1 and earlier, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting the Job/Configure permission to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-10352

GHSA-QR42-82QJ-MW65

RHSA-2019:2503

RHSA-2019:2548

Affected Products

Jenkins

References · 12

• 🔥 https://tenable.com/security/research/tra-2019-35 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-10352 · Security Note
• https://osv.dev/vulnerability/GHSA-qr42-82qj-mw65 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2503 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2548 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-10352 · Vendor Advisory
• https://jenkins.io/security/advisory/2019-07-17/#SECURITY-1424 · Vendor Advisory
• https://github.com/jenkinsci/jenkins · Note
• https://github.com/jenkinsci/jenkins/commit/18fc7c0b466553cbd4f790db3270964305bee7f9 · Note
• http://openwall.com/lists/oss-security/2019/07/17/2 · Note
• http://securityfocus.com/bid/109299 · Note
• https://web.archive.org/web/20200227033157/http://securityfocus.com/bid/109299 · Note