Lucene search

CVE-2013-7330

🗓️ 17 Oct 2014 15:00:00Reported by debianType

Jenkins before 1.502 allows remote authenticated users to configure restricted project via post-build action

Reporter	Title	Published	Views	Family All 19
Github Security Blog	Jenkins allows attackers to configure restricted projects	17 May 202203:53	–	github
Github Security Blog	Jenkins allows attackers to execute arbitrary jobs	17 May 202203:53	–	github
Prion	Design/Logic Flaw	17 Oct 201415:55	–	prion
Prion	Design/Logic Flaw	17 Oct 201415:55	–	prion
Veracode	Authorization Bypass	2 May 201904:55	–	veracode
NVD	CVE-2013-7330	17 Oct 201415:55	–	nvd
NVD	CVE-2014-2058	17 Oct 201415:55	–	nvd
OSV	Jenkins allows attackers to configure restricted projects	17 May 202203:53	–	osv
OSV	Jenkins allows attackers to execute arbitrary jobs	17 May 202203:53	–	osv
OSV	Red Hat Bug Fix Advisory: Red Hat OpenShift Enterprise 2.1 jenkins-plugin-openshift bug fix update	15 Sep 202422:07	–	osv

Source	Link
wiki	www.wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
openwall	www.openwall.com/lists/oss-security/2014/02/21/2
github	www.github.com/jenkinsci/jenkins/commit/36342d71e29e0620f803a7470ce96c61761648d8

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Oct 2014 15:00Current

5.8Medium risk

Vulners AI Score5.8

EPSS0.001

jenkins security configuration restriction vectors post-build actions