Arbitrary File Read Vulnerability in TAP Plugin in Jenkins

Arbitrary File Read Vulnerability in TAP Plugin in Jenkins

CVE-2016-4986 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter.

Learn more about our Web Application Penetration Testing UK.