CVE-2018-1000148

MEDIUM · CVSS 6.5 EPSS 0.99%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-04-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-1000148

Severity

MEDIUM

CVSS

6.5

EPSS

0.99%

Jenkins Java

Original NVD Description

An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system.