Skip to content

CVE-2016-4986 Jenkins TAP Plugin allows Path Traversal

HighCVSS 7.5 EPSS 3.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter.

Affected products

ProductAffected versionsFixed in
org.tap4j/tap(Maven) < 1.25 1.25
org.tap4j/tap(Maven) = 1.0 No fix listed
org.tap4j/tap(Maven) = 1.1 No fix listed
org.tap4j/tap(Maven) = 1.10 No fix listed
org.tap4j/tap(Maven) = 1.11 No fix listed
org.tap4j/tap(Maven) = 1.12 No fix listed
org.tap4j/tap(Maven) = 1.13 No fix listed
org.tap4j/tap(Maven) = 1.14 No fix listed
org.tap4j/tap(Maven) = 1.15 No fix listed
org.tap4j/tap(Maven) = 1.16 No fix listed
org.tap4j/tap(Maven) = 1.17 No fix listed
org.tap4j/tap(Maven) = 1.18 No fix listed
org.tap4j/tap(Maven) = 1.18-1-alpha No fix listed
org.tap4j/tap(Maven) = 1.18-alpha No fix listed
org.tap4j/tap(Maven) = 1.2 No fix listed
org.tap4j/tap(Maven) = 1.2.1 No fix listed
org.tap4j/tap(Maven) = 1.2.2 No fix listed
org.tap4j/tap(Maven) = 1.2.3 No fix listed
org.tap4j/tap(Maven) = 1.2.4 No fix listed
org.tap4j/tap(Maven) = 1.2.5 No fix listed
org.tap4j/tap(Maven) = 1.2.6 No fix listed
org.tap4j/tap(Maven) = 1.2.7 No fix listed
org.tap4j/tap(Maven) = 1.2.8 No fix listed
org.tap4j/tap(Maven) = 1.20 No fix listed
org.tap4j/tap(Maven) = 1.22 No fix listed
Show 9 more
ProductAffected versionsFixed in
org.tap4j/tap(Maven) = 1.23 No fix listed
org.tap4j/tap(Maven) = 1.24 No fix listed
org.tap4j/tap(Maven) = 1.3 No fix listed
org.tap4j/tap(Maven) = 1.5 No fix listed
org.tap4j/tap(Maven) = 1.6 No fix listed
org.tap4j/tap(Maven) = 1.7 No fix listed
org.tap4j/tap(Maven) = 1.8 No fix listed
org.tap4j/tap(Maven) = 1.9 No fix listed
jenkins tap < 1.25 1.25

References