CVE-2018-1999002

A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers to send crafted HTTP requests returning the contents of any file on the Jenkins master file system that the Jenkins master has access to.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v3.0

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

86.64% chance of exploitation in the next 30 days, 100th percentile

Published

2018-07-23

Updated

2024-08-05

Proof-of-concept exploits (3)

• 0x6b7966/CVE-2018-19990020★ · 2019-09-10
• slowmistio/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins0★ · 2019-02-23
• im23pds/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/46453

References

• CVE Record
• NVD entry

Related

• CVE-2019-0708
• CVE-2019-13063
• CVE-2016-5003
• CVE-2019-1003000
• CVE-2019-17570
• CVE-2018-19990