deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-11737
Published: 2018-06-05
Description: An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_fix_idxrec in tsk/fs/ntfs_dent.cpp which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/sleuthkit/sleuthkit/issues/1266; https://github.com/sleuthkit/sleuthkit/issues/1266
CVE: CVE-2018-11738
Published: 2018-06-05
Description: An issue was discovered in libtskfs.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function ntfs_make_data_run in tsk/fs/ntfs.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/sleuthkit/sleuthkit/issues/1265; https://github.com/sleuthkit/sleuthkit/issues/1265
CVE: CVE-2018-11739
Published: 2018-06-05
Description: An issue was discovered in libtskimg.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function raw_read in tsk/img/raw.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/sleuthkit/sleuthkit/issues/1267; https://github.com/sleuthkit/sleuthkit/issues/1267
CVE: CVE-2018-11740
Published: 2018-06-05
Description: An issue was discovered in libtskbase.a in The Sleuth Kit (TSK) from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function tsk_UTF16toUTF8 in tsk/base/tsk_unicode.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://github.com/sleuthkit/sleuthkit/issues/1264; https://github.com/sleuthkit/sleuthkit/issues/1264
CVE: CVE-2018-11722
Published: 2018-06-05
Description: WUZHI CMS 4.1.0 has a SQL Injection in api/uc.php via the 'code' parameter, because 'UC_KEY' is hard coded.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/wuzhicms/wuzhicms/issues/141; https://github.com/wuzhicms/wuzhicms/issues/141
CVE: CVE-2018-1252
Published: 2018-06-05
Description: RSA Web Threat Detection versions prior to 6.4, contain an SQL injection vulnerability in the Administration and Forensics applications. An authenticated malicious user with low privileges could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain unauthorized access to the tool's monitoring and user information by supplying specially crafted input data to the affected application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2018/Jun/4; http://www.securityfocus.com/bid/104396; http://www.securitytracker.com/id/1041026
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: http://www.securityfocus.com/bid/106567; https://access.redhat.com/errata/RHSA-2018:2423; https://access.redhat.com/errata/RHSA-2018:2424
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: Kitura 2.3.0 and earlier have an unintended read access to unauthorised files and folders that can be exploited by a crafted URL resulting in information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/IBM-Swift/Kitura/pull/1278; https://github.com/IBM-Swift/Kitura/pull/1278
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: The Linux Kernel versions 4.14, 4.15, and 4.16 has a null pointer dereference which can result in an out of memory (OOM) killing of large mlocked processes. The issue arises from an oom killed process's final thread calling exit_mmap(), which calls munlock_vma_pages_all() for mlocked vmas.This can happen synchronously with the oom reaper's unmap_page_range() since the vma's VM_LOCKED bit is cleared before munlocking (to determine if any other vmas share the memory and are mlocked).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://seclists.org/oss-sec/2018/q2/67; http://www.securityfocus.com/bid/104397; https://access.redhat.com/errata/RHSA-2018:2948
CVE: CVE-2018-11743
Published: 2018-06-05
Description: The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denial of service (mrb_hash_keys uninitialized pointer and application crash) or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-824
References: https://github.com/mruby/mruby/commit/b64ce17852b180dfeea81cf458660be41a78974d; https://github.com/mruby/mruby/issues/4027; https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html
CVE: CVE-2016-9488
Published: 2018-06-05
Description: ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated attacker is able to access the URL /servlet/MenuHandlerServlet, which is vulnerable to SQL injection. The attacker could extract users' password hashes, which are MD5 hashes without salt, and, depending on the database type and its configuration, could also execute operating system commands using SQL queries.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/158554/ManageEngine-Applications-Manager-13-SQL-Injection.html; http://seclists.org/fulldisclosure/2017/Apr/9; http://www.securityfocus.com/bid/97394
CVE: CVE-2016-9490
Published: 2018-06-05
Description: ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from a Reflected Cross-Site Scripting vulnerability. Applications Manager is prone to a Cross-Site Scripting vulnerability in parameter LIMIT, in URL path /DiagAlertAction.do?REQTYPE=AJAX&LIMIT=1233. The URL is also available without authentication.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://seclists.org/fulldisclosure/2017/Apr/9; http://www.securityfocus.com/bid/97394; https://packetstormsecurity.com/files/142022/ManageEngine-Applications-Manager-12-13-XSS-SQL-Injection-Code-Execution.html
CVE: CVE-2018-6662
Published: 2018-06-05
Description: Privilege Escalation vulnerability in McAfee Management of Native Encryption (MNE) before 4.1.4 allows local users to gain elevated privileges via a crafted user input.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/104009; https://kc.mcafee.com/corporate/index?page=content&id=SB10232; http://www.securityfocus.com/bid/104009
CVE: CVE-2018-8923
Published: 2018-06-05
Description: Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authenticated users to inject arbitrary web script or HTML via malicious attachments.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/zh-tw/support/security/Synology_SA_18_09; https://www.synology.com/zh-tw/support/security/Synology_SA_18_09
CVE: CVE-2018-8924
Published: 2018-06-05
Description: Cross-site scripting (XSS) vulnerability in Title Tootip in Synology Office before 3.0.3-2143 allows remote authenticated users to inject arbitrary web script or HTML via the malicious file name.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.synology.com/zh-tw/support/security/Synology_SA_18_12; https://www.synology.com/zh-tw/support/security/Synology_SA_18_12
CVE: CVE-2017-1350
Published: 2018-06-05
Description: IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their privileges to administrator due to improper access controls. IBM X-Force ID: 126526.
CVSS Score: 8.4 (HIGH)
References: http://www.ibm.com/support/docview.wss?uid=swg22005503; http://www.securityfocus.com/bid/104550; http://www.securitytracker.com/id/1041042
CVE: CVE-2018-10813
Published: 2018-06-05
Description: In Dedos-web 1.0, the cookie and session secrets used in the Express.js application have hardcoded values that are visible in the source code published on GitHub. An attacker can edit the contents of the session cookie and re-sign it using the hardcoded secret. Due to the use of Passport.js, this could lead to privilege escalation.
CVSS Score: 7.3 (HIGH)
CWE: CWE-798
References: https://github.com/aprendecondedos/dedos-web/pull/1; https://www.digitalinterruption.com/single-post/2018/06/04/Are-Your-Cookies-Telling-Your-Fortune; https://github.com/aprendecondedos/dedos-web/pull/1
CVE: CVE-2018-10966
Published: 2018-06-05
Description: An issue was discovered in GamerPolls 0.4.6, related to config/environments/all.js and config/initializers/02_passport.js. An attacker can edit the Passport.js contents of the session cookie to contain the ID number of the account they wish to take over, and re-sign it using the hard coded secret.
CVSS Score: 7.3 (HIGH)
CWE: CWE-798
References: https://github.com/GamerPolls/gamerpolls.com/blob/03ccbaf219410e0a45390d0efc12017f08a25282/config/environments/all.js#L58; https://github.com/GamerPolls/gamerpolls.com/pull/56; https://www.digitalinterruption.com/single-post/2018/06/04/Are-Your-Cookies-Telling-Your-Fortune
CVE: CVE-2018-1432
Published: 2018-06-05
Description: IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to cross-frame scripting which is a vulnerability that allows an attacker to load Information Server components inside an HTML iframe tag on a malicious page. The attacker could use this weakness to devise a Clickjacking attack to conduct phishing, frame sniffing, social engineering or Cross-Site Request Forgery attacks. IBM X-Force ID: 139360.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352, CWE-1021
References: http://www.ibm.com/support/docview.wss?uid=swg22014911; http://www.securitytracker.com/id/1041039; https://exchange.xforce.ibmcloud.com/vulnerabilities/139360
CVE: CVE-2018-1454
Published: 2018-06-05
Description: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 140089.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: http://www.ibm.com/support/docview.wss?uid=swg22015222; http://www.securitytracker.com/id/1041038; https://exchange.xforce.ibmcloud.com/vulnerabilities/140089
CVE: CVE-2018-7943
Published: 2018-06-05
Description: There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level users' privilege.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-server-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-server-en
CVE: CVE-2018-1332
Published: 2018-06-05
Description: Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to impersonate another user when communicating with some Storm Daemons.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/104399; https://lists.apache.org/thread.html/50f1d6a7af27f49d2e498a9ab[PII_REDACTED]cd8ca47000b7c38f339a4%40%3Cdev.storm.apache.org%3E; http://www.securityfocus.com/bid/104399
CVE: CVE-2018-8008
Published: 2018-06-05
Description: Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/104418; https://lists.apache.org/thread.html/613b2fca8bcd0a3b12c0b763ea8f7cf62e422e9f79fce6cfa5b08a58%40%3Cdev.storm.apache.org%3E; http://www.securityfocus.com/bid/104418
CVE: CVE-2017-7653
Published: 2018-06-05
Description: The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client could cause other clients that do reject invalid UTF-8 strings to disconnect themselves from the broker by sending a topic string which is not valid UTF-8, and so cause a denial of service for the clients.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://docs.oasis-open.org/mqtt/disallowed-chars/v1.0/disallowed-chars-v1.0.pdf; https://bugs.eclipse.org/bugs/show_bug.cgi?id=532113; https://lists.debian.org/debian-lts-announce/2018/09/msg00036.html
CVE: CVE-2017-7654
Published: 2018-06-05
Description: In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthenticated clients can send crafted CONNECT packets which could cause a denial of service in the Mosquitto Broker.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-772
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=533493; https://lists.debian.org/debian-lts-announce/2018/09/msg00036.html; https://usn.ubuntu.com/4023-1/
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A server-side request forgery vulnerability exists in Jenkins Git Plugin 3.9.0 and older in AssemblaWeb.java, GitBlitRepositoryBrowser.java, Gitiles.java, TFS2013GitRepositoryBrowser.java, ViewGitWeb.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-918
References: https://jenkins.io/security/advisory/2018-06-04/#SECURITY-810; https://jenkins.io/security/advisory/2018-06-04/#SECURITY-810
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubServerConfig.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-06-04/#SECURITY-804; https://jenkins.io/security/advisory/2018-06-04/#SECURITY-804
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://jenkins.io/security/advisory/2018-06-04/#SECURITY-799; https://jenkins.io/security/advisory/2018-06-04/#SECURITY-799
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A server-side request forgery vulnerability exists in Jenkins GitHub Branch Source Plugin 2.3.4 and older in Endpoint.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://jenkins.io/security/advisory/2018-06-04/#SECURITY-806; https://jenkins.io/security/advisory/2018-06-04/#SECURITY-806
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-06-04/#SECURITY-805; https://jenkins.io/security/advisory/2018-06-04/#SECURITY-805
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.7.0 and older in ContainerExecDecorator.java that results in sensitive variables such as passwords being written to logs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-06-04/#SECURITY-883; https://jenkins.io/security/advisory/2018-06-04/#SECURITY-883
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://jenkins.io/security/advisory/2018-06-04/#SECURITY-809; https://jenkins.io/security/advisory/2018-06-04/#SECURITY-809
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A command execution vulnerability exists in Jenkins Absint Astree Plugin 1.0.5 and older in AstreeBuilder.java that allows attackers with Overall/Read access to execute a command on the Jenkins master.
CVSS Score: 8.8 (HIGH)
References: https://jenkins.io/security/advisory/2018-06-04/#SECURITY-807; https://jenkins.io/security/advisory/2018-06-04/#SECURITY-807
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A exposure of sensitive information vulnerability exists in Jenkins Black Duck Hub Plugin 4.0.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-06-04/#SECURITY-865; https://jenkins.io/security/advisory/2018-06-04/#SECURITY-865
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A exposure of sensitive information vulnerability exists in Jenkins Black Duck Detect Plugin 1.4.0 and older in DetectPostBuildStepDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-06-04/#SECURITY-866; https://jenkins.io/security/advisory/2018-06-04/#SECURITY-866
CVE: CVE-2018-10597
Published: 2018-06-05
Description: IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that allows an unauthenticated attacker to access memory ("write-what-where") from an attacker-chosen device address within the same subnet.
CVSS Score: 8.3 (HIGH)
CWE: CWE-287, CWE-787
References: https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01; https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01
CVE: CVE-2018-10599
Published: 2018-06-05
Description: IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that allows an unauthenticated attacker to read memory from an attacker-chosen device address within the same subnet.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01; https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01
CVE: CVE-2018-10601
Published: 2018-06-05
Description: IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX100 for Rev M only), and Avalon Fetal/Maternal Monitors FM20/FM30/FM40/FM50 with software Revisions F.0, G.0 and J.3 have a vulnerability that exposes an "echo" service, in which an attacker-sent buffer to an attacker-chosen device address within the same subnet is copied to the stack with no boundary checks, hence resulting in stack overflow.
CVSS Score: 8.2 (HIGH)
CWE: CWE-121, CWE-787
References: https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01; https://ics-cert.us-cert.gov/advisories/ICSMA-18-156-01
CVE: CVE-2017-7635
Published: 2018-06-05
Description: QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securitytracker.com/id/1041025; https://www.qnap.com/en/security-advisory/nas-201806-01; http://www.securitytracker.com/id/1041025
CVE: CVE-2017-7636
Published: 2018-06-05
Description: Cross-site scripting (XSS) vulnerability in QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1041025; https://www.qnap.com/en/security-advisory/nas-201806-01; http://www.securitytracker.com/id/1041025
CVE: CVE-2017-7637
Published: 2018-06-05
Description: QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary OS commands against the system with root privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.securitytracker.com/id/1041025; https://www.qnap.com/en/security-advisory/nas-201806-01; http://www.securitytracker.com/id/1041025
CVE: CVE-2017-7639
Published: 2018-06-05
Description: QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation can lead to change of the settings of Proxy Server.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: http://www.securitytracker.com/id/1041025; https://www.qnap.com/en/security-advisory/nas-201806-01; http://www.securitytracker.com/id/1041025
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A information exposure vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in AboutJenkins.java, ListPluginsCommand.java that allows users with Overall/Read access to enumerate all installed plugins.
CVSS Score: 4.3 (MEDIUM)
References: https://jenkins.io/security/advisory/2018-05-09/#SECURITY-771; https://www.oracle.com/security-alerts/cpuapr2022.html; https://jenkins.io/security/advisory/2018-05-09/#SECURITY-771
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A improper neutralization of control sequences vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in HudsonPrivateSecurityRealm.java that allows users to sign up using user names containing control characters that can then appear to have the same name as other users, and cannot be deleted via the UI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-74
References: https://jenkins.io/security/advisory/2018-05-09/#SECURITY-786; https://www.oracle.com/security-alerts/cpuapr2022.html; https://jenkins.io/security/advisory/2018-05-09/#SECURITY-786
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A path traversal vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in FilePath.java, SoloFilePathFilter.java that allows malicious agents to read and write arbitrary files on the Jenkins master, bypassing the agent-to-master security subsystem protection.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://jenkins.io/security/advisory/2018-05-09/#SECURITY-788; https://www.oracle.com/security-alerts/cpuapr2022.html; https://jenkins.io/security/advisory/2018-05-09/#SECURITY-788