com.antelink.reporter.jenkins.plugin:antepediareporter-ci-plugin (>=1.7, <=1.8), com.dubture.jenkins:digitalocean-plugin (>=0.1, <=0.2) +39 more potentially affected by CVE-2014-2060 via org.jenkins-ci.main:jenkins-core (>=1.533, <=1.550)

org.jenkins-ci.main:jenkins-core MAVEN version =1.533, =1.7, =0.1, =1.53, =1.0.0, =0.1, =1.533, =1.533, =1.533, =1.533, =1.18, =3.0.0, =3.0.1 and more Source cves: CVE-2014-2060 Source advisory: OSV:GHSA-9C26-CF8C-MW43...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2) +923 more potentially affected by CVE-2014-2060 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.532.1.jenkins-19453)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0, =0.0.1, =0.9, =1.0, =1.0.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.1, =1.0, =1.3 and more Source cves: CVE-2014-2060 Source advisory: GHSA-9C26-CF8C-MW43...

CVE-2014-2060

The CVE-2014-2060 entry describes a vulnerability in Jenkins where the Winstone servlet container (org.jenkins-ci:winstone) used by Jenkins before version 1.551 and LTS before 1.532.2 allows remote attackers to hijack user sessions via unspecified vectors. The impact is session hijacking without ...

CVE-2014-2060: Undefined Security Weakness

The Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack sessions via unspecified vectors...