Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins master they should not have access to. On Windows, any file accessible to the Jenkins master process could be downloaded. On other operating systems, any file within the Jenkins home directory accessible to the Jenkins master process could be downloaded.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that
    escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read
    permission to download files from the Jenkins master they should not have access to. On Windows, any file
    accessible to the Jenkins master process could be downloaded. On other operating systems, any file within
    the Jenkins home directory accessible to the Jenkins master process could be downloaded. (CVE-2018-6356)

The version of Jenkins running on the remote web server is prior to 2.107 or is a version of Jenkins LTS prior to 2.89.4. It is, therefore, affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Jenkins developers report :

Jenkins did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins master they should not have access to.

ID	Name	Product	Family	Severity
410939	SCA: security update for org.jenkins-ci.main:jenkins-core (GHSA-5p59-v5wm-77v4)	Tenable Cloud Security	SCA Checks	medium
410939	SCA: security update for org.jenkins-ci.main:jenkins-core (GHSA-5p59-v5wm-77v4)	Tenable Self-Hosted Container Security	SCA Checks	medium
106951	Jenkins < 2.89.4 / 2.107 Multiple Vulnerabilities	Nessus	CGI abuses	medium
106832	FreeBSD : jenkins -- Path traversal vulnerability allows access to files outside plugin resources (5d374fbb-bae3-45db-afc0-795684ac7353)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2018-6356

medium

Tenable Plugins

medium

medium

medium

medium