CVE-2018-1999038

4.2MEDIUM

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specifi

发布于: 8/1/2018更新于: 11/21/2024
在NVD查看在MITRE查看

描述

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specified CIFS server with attacker specified credentials.

AI分析AI驱动

受影响产品

jenkinspublish_over_cifs

参考资料