Vulnerabilities > CVE-2019-10375 - Unspecified vulnerability in Jenkins File System SCM

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

jenkins

NVD

Published: 2019-08-07

Updated: 2023-10-25

Summary

An arbitrary file read vulnerability in Jenkins File System SCM Plugin 2.1 and earlier allows attackers able to configure jobs in Jenkins to obtain the contents of any file on the Jenkins master.

Vulnerable Configurations

Part	Description	Count
Application	Jenkins Jenkins File System SCM - Jenkins File System SCM 0.1 Jenkins File System SCM 1.5 Jenkins File System SCM 1.6 Jenkins File System SCM 1.7 Jenkins File System SCM 1.8 Jenkins File System SCM 1.9 Jenkins File System SCM 1.10 Jenkins File System SCM 1.20 Jenkins File System SCM 1.21 Jenkins File System SCM 2.0 Jenkins File System SCM 2.1	13

References

https://jenkins.io/security/advisory/2019-08-07/#SECURITY-569
http://www.openwall.com/lists/oss-security/2019/08/07/1