CVE-2018-1999043

A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows attackers to create ephemeral in-memory user records by attempting to log in using invalid credentials...

PT-2018-15222

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.137 Jenkins versions prior to 2.121.2 Description A denial of service issue exists that allows attackers to create ephemeral in-memory user records by attempting to log in using invalid credentials, specifically...

CVE-2018-1999043: Missing Release of Resource after Effective Lifetime

A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows attackers to create ephemeral in-memory user records by attempting to log in using invalid credentials...