CVE-2018-1000408: Uncontrolled Resource Consumption

January 9, 2019 (updated October 3, 2019)

A denial of service vulnerability exists in Jenkins that allows attackers without Overall/Read permission to access a specific URL on instances using the built-in Jenkins user database security realm that results in the creation of an ephemeral user record in memory.

References

www.securityfocus.com/bid/106532
jenkins.io/security/advisory/2018-10-10/
nvd.nist.gov/vuln/detail/CVE-2018-1000408

Code Behaviors & Features

Detect and mitigate CVE-2018-1000408 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →