Jenkins < 2.138 and < 2.121.3 LTS Multiple Vulnerabilities - Windows

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-1999045

A improper authentication vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in SecurityRealm.java, TokenBasedRememberMeServices2.java that allows attackers with a valid cookie to remain logged in even if that feature is disabled...

CVE-2018-1999045

The connected documents confirm CVE-2018-1999045 affects Jenkins versions up to 2.137/2.121.2 (and LTS up to 2.121.3) due to improper authentication in SecurityRealm.java and TokenBasedRememberMeServices2.java, allowing an attacker with a valid cookie to stay logged in even when remember-me is di...