Lucene search
RootSSV:61587HistoryFeb 27, 2014 - 12:00 a.m.
Jenkins BuildTrigger类权限绕过漏洞
2014-02-2700:00:00
Root
www.seebug.org
17
0.001 Low
EPSS
Percentile
48.1%
CVE ID:CVE-2013-7330
Jenkins的前身是Hudson是一个可扩展的持续集成引擎。
Jenkins BuildTrigger类存在安全漏洞，允许攻击者绕过授权机制配置作业，执行受限的作业。
0
Jenkins 1.550
Jenkins 1.532.1
厂商补丁：
Jenkins
Jenkins 1.532.2, 1.551已经修复该漏洞，建议用户下载更新：
http://jenkins-ci.org/
Related
cvelist
cvelist
CVE-2013-7330
2014-10-17 15:00:00
CVE-2014-2058
2014-10-17 15:00:00
cve
cve
CVE-2013-7330
2014-10-17 15:55:05
CVE-2014-2058
2014-10-17 15:55:05
osv
osv
Jenkins allows attackers to configure restricted projects
2022-05-17 03:53:55
Jenkins allows attackers to execute arbitrary jobs
2022-05-17 03:53:55
github
github
Jenkins allows attackers to configure restricted projects
2022-05-17 03:53:55
Jenkins allows attackers to execute arbitrary jobs
2022-05-17 03:53:55
veracode
veracode
Authorization Bypass
2019-05-02 04:55:59
prion
prion
Design/Logic Flaw
2014-10-17 15:55:00
Design/Logic Flaw
2014-10-17 15:55:00
nvd
nvd
CVE-2013-7330
2014-10-17 15:55:05
CVE-2014-2058
2014-10-17 15:55:05
ubuntucve
ubuntucve
CVE-2014-2058
2014-10-17 00:00:00
CVE-2013-7330
2014-10-17 00:00:00
openvas
openvas
Jenkins < 1.551, < 1.532.2 LTS Multiple Vulnerabilities - Windows
2022-09-01 00:00:00
Jenkins < 1.551, < 1.532.2 LTS Multiple Vulnerabilities - Linux
2022-09-01 00:00:00
nessus
nessus