Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Jenkins Project | Jenkins Job Configuration History Plugin | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Wed, 02 Sep 2026 10:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Jenkins Job Configuration History Plugin 1367.vc8fa_b_15101dc and earlier allows overwriting the plugin's history recording configuration through Stapler data binding, allowing attackers to redirect history storage to an attacker-specified directory and modify history recording settings. | |
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: jenkins
Published:
Updated: 2026-09-02T15:40:52.114Z
Reserved: 2026-09-01T21:55:27.035Z
Link: CVE-2026-84666
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-09-02T16:17:31.247
Modified: 2026-09-02T16:17:31.247
Link: CVE-2026-84666
Redhat
No data.
OpenCVE Enrichment
No data.
No weakness.