CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects Jenkins.
CVE
CVE-2018-1000068
Severity
MEDIUM
CVSS
5.3
EPSS
1.96%
Jenkins
Original NVD Description
An improper input validation vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to access plugin resource files in the META-INF and WEB-INF directories that should not be accessible, if the Jenkins home directory is on a case-insensitive file system.
Related CVEs
Other vulnerabilities affecting the same vendor(s)