CVE-2018-1999038

4.2MEDIUM

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specifi

Publicado: 8/1/2018Actualizado: 11/21/2024
Ver en NVDVer en MITRE

Descripción

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specified CIFS server with attacker specified credentials.

Análisis IAImpulsado por IA

Productos Afectados

jenkinspublish_over_cifs

Referencias