Search vulnerabilities

Results 1

Export CSV
CVE-2018-1999038

A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specified CIFS server with attacker specified credentials.

CVSS 3.0 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors