Security Advisory

CVE-2018-1999038

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-08-01 13:00:00

Last updated 2024-09-17 03:59:44

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specified CIFS server with attacker specified credentials.

← Browse all CVEs View on cve.org ↗