Description
A path traversal vulnerability in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java allowed attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary file write on the Jenkins master when scheduling a build.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Jenkins project Jenkins
2.185 and earlier, LTS 2.176.1 and earlieraffected
References
- https://www.tenable.com/security/research/tra-2019-35 ↗
- http://www.openwall.com/lists/oss-security/2019/07/17/2 ↗
- http://www.securityfocus.com/bid/109299 ↗
- https://access.redhat.com/errata/RHSA-2019:2503 ↗
- https://access.redhat.com/errata/RHSA-2019:2548 ↗
- https://jenkins.io/security/advisory/2019-07-17/#SECURITY-1424 ↗