Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

redhat логотип

CVE-2018-1999001

около 8 лет назад

A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows attackers to provide crafted login credentials that cause Jenkins to move the config.xml file from the Jenkins home directory. If Jenkins is started without this file present, it will revert to the legacy defaults of granting administrator access to anonymous users.

CVSS3: 8.8
EPSS: Средний
nvd логотип

CVE-2018-1999001

около 8 лет назад

A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows attackers to provide crafted login credentials that cause Jenkins to move the config.xml file from the Jenkins home directory. If Jenkins is started without this file present, it will revert to the legacy defaults of granting administrator access to anonymous users.

CVSS3: 8.8
EPSS: Средний
debian логотип

CVE-2018-1999001

около 8 лет назад

A unauthorized modification of configuration vulnerability exists in J ...

CVSS3: 8.8
EPSS: Средний
github логотип

GHSA-j8qv-mj4r-6fw4

больше 4 лет назад

Improper Input Validation in Jenkins

CVSS3: 8.8
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2018-1999001

A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows attackers to provide crafted login credentials that cause Jenkins to move the config.xml file from the Jenkins home directory. If Jenkins is started without this file present, it will revert to the legacy defaults of granting administrator access to anonymous users.

CVSS3: 8.8
18%
Средний
около 8 лет назад
nvd логотип
CVE-2018-1999001

A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows attackers to provide crafted login credentials that cause Jenkins to move the config.xml file from the Jenkins home directory. If Jenkins is started without this file present, it will revert to the legacy defaults of granting administrator access to anonymous users.

CVSS3: 8.8
18%
Средний
около 8 лет назад
debian логотип
CVE-2018-1999001

A unauthorized modification of configuration vulnerability exists in J ...

CVSS3: 8.8
18%
Средний
около 8 лет назад
github логотип
GHSA-j8qv-mj4r-6fw4

Improper Input Validation in Jenkins

CVSS3: 8.8
18%
Средний
больше 4 лет назад

Уязвимостей на страницу