Lucene search

K
osvGoogleOSV:GHSA-8JFX-H6Q2-V4G3
HistoryMay 17, 2022 - 3:53 a.m.

Jenkins session fixation vulnerability

2022-05-1703:53:42
Google
osv.dev
8

6.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.6%

Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the “override” of Jenkins cookies.

6.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.6%