Arbitrary file read in Jenkins - CVE-2018-1999002
Published: July 26, 2018 / Updated: June 17, 2021
Vulnerability identifier: #VU14004
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-1999002
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The disclosed vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists due to arbitrary file read in the Stapler web framework's org/kohsuke/stapler/Stapler.java. A remote attacker can send specially crafted HTTP requests and return the contents of any file on the Jenkins master file system that the Jenkins master has access to.
Affected software
Jenkins
Arch Linux
Arch Linux
How to mitigate CVE-2018-1999002
The vulnerability is addressed in the versions 1.121.2, 1.133.
Jenkins - addressed in versions 2.121.2, 2.133