Archive
10 December 2018
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Medium 4.3
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
An information exposure vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allows attackers with the ability to control build output to browse the file system on agents running builds beyond the dur…
-
Medium 6.5
Loop with Unreachable Exit Condition in Jenkins
A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with Overall/Read permission to have a request handling thread enter an infinite loop.
-
Medium 4.0
IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by t…