CVE-2018-1000067

—

CVSS 3.1

5.3 medium

EPSS

2%p75

Published

Feb 16, 2018 (Feb 16, 2018)

Modified

Jun 17, 2026

Description

An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submit HTTP GET requests and get limited information about the response.

Vendors: jenkins oracle
Products: jenkins, communications cloud native core automated test suite
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.