CVE-2018-1999038

4.2MEDIUM

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specifi

公開日: 8/1/2018更新日: 11/21/2024
NVDで表示MITREで表示

説明

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specified CIFS server with attacker specified credentials.

AI分析AIによる分析

影響を受ける製品

jenkinspublish_over_cifs

参照