CVE-2018-1000067

An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.
Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*

Configuration 3 (hide)

cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.9.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-02-16 00:29

Updated : 2024-02-28 16:25


NVD link : CVE-2018-1000067

Mitre link : CVE-2018-1000067

CVE.ORG link : CVE-2018-1000067


JSON object : View

Products Affected

oracle

  • communications_cloud_native_core_automated_test_suite

jenkins

  • jenkins
CWE
CWE-918

Server-Side Request Forgery (SSRF)