CVE-2018-1999001

high-risk
Published 2018-07-23

A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows attackers to provide crafted login credentials that cause Jenkins to move the config.xml file from the Jenkins home directory. If Jenkins is started without this file present, it will revert to the legacy defaults of granting administrator access to anonymous users.

Do I need to act?

!
27.3% chance of exploitation in next 30 days
EPSS score — higher than 73% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (2)

Affected Vendors

Oracle Jenkins

References (4)

Mitigation https://jenkins.io/security/advisory/2018-07-18/#SECURITY-897
Patch https://www.oracle.com/security-alerts/cpuapr2022.html
Mitigation https://jenkins.io/security/advisory/2018-07-18/#SECURITY-897
Patch https://www.oracle.com/security-alerts/cpuapr2022.html
52
/ 100
high-risk
Severity 30/34 · Critical
Exploitability 15/34 · Moderate
Exposure 7/34 · Low