CVE-2018-1000067

An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.
Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*

Configuration 3 (hide)

cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.9.0:*:*:*:*:*:*:*

History

21 Nov 2024, 03:39

Type Values Removed Values Added
References () https://jenkins.io/security/advisory/2018-02-14/#SECURITY-506 - Vendor Advisory () https://jenkins.io/security/advisory/2018-02-14/#SECURITY-506 - Vendor Advisory
References () https://www.oracle.com/security-alerts/cpuapr2022.html - Patch, Third Party Advisory () https://www.oracle.com/security-alerts/cpuapr2022.html - Patch, Third Party Advisory

Information

Published : 2018-02-16 00:29

Updated : 2024-11-21 03:39


NVD link : CVE-2018-1000067

Mitre link : CVE-2018-1000067

CVE.ORG link : CVE-2018-1000067


JSON object : View

Products Affected

jenkins

  • jenkins

oracle

  • communications_cloud_native_core_automated_test_suite
CWE
CWE-918

Server-Side Request Forgery (SSRF)