1. Home
  2. Security Advisories
  3. Jenkins
  4. JENKINS:SECURITY-1968-1

[JENKINS:SECURITY-1968-1] Arbitrary file read vulnerability in `storable-configs-plugin`

Severity Medium
Affected Packages 2
CVEs 1
Info Packages References Vulnerabilities

storable-configs-plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller.

As of publication of this advisory, there is no fix.

Package Affected Version
pkg:maven/org.jenkins-ci.plugins/storable-configs-plugin <= 1.0
pkg:github/jenkinsci/storable-configs-plugin-plugin <= 1.0
ID
JENKINS:SECURITY-1968-1
Severity
medium
Published
2020-09-16T00:00:00
(4 years ago)
Modified
2020-09-16T00:00:00
(4 years ago)
Rights
Jenkins Security Team
Other Advisories
Source # ID Name URL
Plugin repository storable-configs-plugin repository https://github.com/jenkinsci/storable-configs-plugin-plugin
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:maven/org.jenkins-ci.plugins/storable-configs-plugin org.jenkins-ci.plugins storable-configs-plugin <= 1.0
Affected pkg:github/jenkinsci/storable-configs-plugin-plugin jenkinsci storable-configs-plugin-plugin <= 1.0
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date