aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2) +923 more potentially affected by CVE-2014-2062 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.532.1.jenkins-19453)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0, =0.0.1, =0.9, =1.0, =1.0.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.1, =1.0, =1.3 and more Source cves: CVE-2014-2062 Source advisory: OSV:GHSA-VXC6-WVH8-FPXW...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2) +923 more potentially affected by CVE-2014-2062 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.532.1.jenkins-19453)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0, =0.0.1, =0.9, =1.0, =1.0.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.1, =1.0, =1.3 and more Source cves: CVE-2014-2062 Source advisory: GHSA-VXC6-WVH8-FPXW...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2) +923 more potentially affected by CVE-2014-2062 via org.jenkins-ci.main:jenkins-core (>=1.396, <=1.532.1.jenkins-19453)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =0.0.1, =1.0, =0.0.1, =0.9, =1.0, =1.0.0, =1.0, =1.0-beta-1, =2.1, =1.0, =1.1, =1.0, =1.3 and more Source cves: CVE-2014-2062 Source advisory: MEND:CVE-2014-2062...

CVE-2014-2062

CVE-2014-2062 affects Jenkins before 1.551 and the LTS release before 1.532.2. The vulnerability is that deleting a user does not invalidate their API token, allowing remote authenticated users to retain access via the token. The consolidated data set confirms the affected versions and the token-...