Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

CVE-2018-1999038 (publish_over_cifs)

maltiger last edited by

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specified CIFS server with attacker specified credentials.

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1999038
Reply Quote
1 Reply Last reply

1
Posts

79
Views

Log in to reply

© Lightnetics 2024

1 / 1