Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2022/05/05 2:48 a.m.29 views

Jenkins allows attackers to obtain the master cryptographic key

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

2.6CVSS6.8AI score0.00653EPSS
Exploits0References18Affected Software1
OSV
OSV
added 2022/05/05 2:48 a.m.1 views

GHSA-JWFR-H6JP-9P2G Jenkins allows attackers to obtain the master cryptographic key

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

2.6CVSS5.9AI score0.00653EPSS
Exploits0References18
VulnCheck KEV
VulnCheck KEV
added 2013/03/14 12:0 a.m.1 views

VulnCheck KEV: CVE-2013-0158

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

2.6CVSS5.8AI score0.00653EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2013/02/24 10:55 p.m.33 views

CVE-2013-0158

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

2.6CVSS5.9AI score0.00653EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2013/01/08 12:0 a.m.10 views

FreeBSD : jenkins -- HTTP access to the server to retrieve the master cryptographic key (3a65d33b-5950-11e2-b66b-00e0814cab4e)

Jenkins Security Advisory reports : This advisory announces a security vulnerability that was found in Jenkins core. An attacker can then use this master cryptographic key to mount remote code execution attack against the Jenkins master, or impersonate arbitrary users in making REST API calls...

5.8AI score
Exploits0References2
Rows per page
Query Builder