An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.
References
Link | Resource |
---|---|
https://jenkins.io/security/advisory/2018-02-14/#SECURITY-506 | Vendor Advisory |
https://www.oracle.com/security-alerts/cpuapr2022.html | Patch Third Party Advisory |
Configurations
History
No history.
Information
Published : 2018-02-16 00:29
Updated : 2024-02-28 16:25
NVD link : CVE-2018-1000067
Mitre link : CVE-2018-1000067
CVE.ORG link : CVE-2018-1000067
JSON object : View
Products Affected
oracle
- communications_cloud_native_core_automated_test_suite
jenkins
- jenkins
CWE
CWE-918
Server-Side Request Forgery (SSRF)