CVE-2018-1000408

MEDIUM

Jenkins ACL Bypass and Metaprogramming RCE

Title source: metasploit

Description

A denial of service vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that allows attackers without Overall/Read permission to access a specific URL on instances using the built-in Jenkins user database security realm that results in the creation of an ephemeral user record in memory.

Exploits (1)

metasploit WORKING POC EXCELLENT

by Orange Tsai, Mikhail Egorov, George Noseevich, wvu · rubypocunix

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jenkins_metaprogramming.rb

View Code ZIP pw:eip

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://jenkins.io/security/advisory/2018-10-10/#SECURITY-1128

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/106532

Scores

CVSS v3 6.5

EPSS 0.0015

EPSS Percentile 35.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Details

Status published

Products (3)

jenkins/jenkins < 2.138.1

jenkins/jenkins < 2.145

org.jenkins-ci.main/jenkins-core 0 - 2.138.2Maven

Published Jan 09, 2019

Tracked Since Feb 18, 2026