CVEvulnerability
CVE-2018-1000067
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-02-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-918
Description
An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.
Affected configurations
• jenkins jenkins (<= 2.106)
• jenkins jenkins (<= 2.89.3)
• oracle communications cloud native core automated test suite 1.9.0
Related
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness
References
- https://jenkins.io/security/advisory/2018-02-14/#SECURITY-506 Vendor Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
- https://jenkins.io/security/advisory/2018-02-14/#SECURITY-506 Vendor Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory