AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-1999001

HIGH · CVSS 8.8 EPSS 18.12%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-07-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-1999001
Severity
HIGH
CVSS
8.8
EPSS
18.12%
Jenkins Java

Original NVD Description

A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows attackers to provide crafted login credentials that cause Jenkins to move the config.xml file from the Jenkins home directory. If Jenkins is started without this file present, it will revert to the legacy defaults of granting administrator access to anonymous users.