2.6

CVE-2013-0158

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cloudbees ≫ Jenkins Version <= 1.480.3.1
Jenkins ≫ Jenkins Version 1.400
Jenkins ≫ Jenkins Version 1.401
Jenkins ≫ Jenkins Version 1.402
Jenkins ≫ Jenkins Version 1.403
Jenkins ≫ Jenkins Version 1.404
Jenkins ≫ Jenkins Version 1.405
Jenkins ≫ Jenkins Version 1.406
Jenkins ≫ Jenkins Version 1.407
Jenkins ≫ Jenkins Version 1.408
Jenkins ≫ Jenkins Version 1.409
Jenkins ≫ Jenkins Version 1.410
Jenkins ≫ Jenkins Version 1.411
Jenkins ≫ Jenkins Version 1.412
Jenkins ≫ Jenkins Version 1.413
Jenkins ≫ Jenkins Version 1.414
Jenkins ≫ Jenkins Version 1.415
Jenkins ≫ Jenkins Version 1.416
Jenkins ≫ Jenkins Version 1.417
Jenkins ≫ Jenkins Version 1.418
Jenkins ≫ Jenkins Version 1.419
Jenkins ≫ Jenkins Version 1.420
Jenkins ≫ Jenkins Version 1.421
Jenkins ≫ Jenkins Version 1.422
Jenkins ≫ Jenkins Version 1.423
Jenkins ≫ Jenkins Version 1.424
Jenkins ≫ Jenkins Version 1.425
Jenkins ≫ Jenkins Version 1.426
Jenkins ≫ Jenkins Version 1.427
Jenkins ≫ Jenkins Version 1.428
Jenkins ≫ Jenkins Version 1.429
Jenkins ≫ Jenkins Version 1.430
Jenkins ≫ Jenkins Version 1.431
Jenkins ≫ Jenkins Version 1.432
Jenkins ≫ Jenkins Version 1.433
Jenkins ≫ Jenkins Version 1.434
Jenkins ≫ Jenkins Version 1.435
Jenkins ≫ Jenkins Version 1.436
Jenkins ≫ Jenkins Version 1.437
Cloudbees ≫ Jenkins Version 1.466.1.2 Update - Edition enterprise
Cloudbees ≫ Jenkins Version 1.466.2.1 Update - Edition enterprise
Cloudbees ≫ Jenkins Version 1.400 Update - Edition lts
Cloudbees ≫ Jenkins Version 1.424 Update - Edition lts
Cloudbees ≫ Jenkins Version 1.447 Update - Edition lts
Jenkins ≫ Jenkins Version <= 1.466.2
Jenkins ≫ Jenkins Version 1.409.1
Jenkins ≫ Jenkins Version 1.409.2
Jenkins ≫ Jenkins Version 1.409.3
Jenkins ≫ Jenkins Version 1.424.1
Jenkins ≫ Jenkins Version 1.424.2
Jenkins ≫ Jenkins Version 1.424.3
Jenkins ≫ Jenkins Version 1.424.4
Jenkins ≫ Jenkins Version 1.424.5
Jenkins ≫ Jenkins Version 1.424.6
Jenkins ≫ Jenkins Version 1.447.1
Jenkins ≫ Jenkins Version 1.447.2
Jenkins ≫ Jenkins Version 1.466.1
Cloudbees ≫ Jenkins Version 1.447.1.1 Update - Edition enterprise
Cloudbees ≫ Jenkins Version 1.447.2.2 Update - Edition enterprise
Cloudbees ≫ Jenkins Version 1.447.3.1 Update - Edition enterprise
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.46% 0.823
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://rhn.redhat.com/errata/RHSA-2013-0220.html
http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-01-04.cb
Vendor Advisory
http://www.openwall.com/lists/oss-security/2013/01/07/4
https://bugzilla.redhat.com/show_bug.cgi?id=892795
https://github.com/jenkinsci/jenkins/commit/3dc13b957b14cec649036e8dd517f0f9cb21fb04
https://github.com/jenkinsci/jenkins/commit/4895eaafca468b7f0f1a3166b2fca7414f0d5da5
https://github.com/jenkinsci/jenkins/commit/94a8789b699132dd706021a6be1b78bc47f19602
https://github.com/jenkinsci/jenkins/commit/a9aff088f327278a8873aef47fa8f80d3c5932fd
https://github.com/jenkinsci/jenkins/commit/c3d8e05a1b3d58b6c4dcff97394cb3a79608b4b2
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-01-04
Vendor Advisory