Lucene search

CVE-2013-6372

🗓️ 08 May 2014 00:00:00Reported by ubuntu.comType

Subversion plugin in Jenkins 1.54 stores credentials using insecure base64 encoding, allowing local users to obtain passwords and SSH keys

Reporter	Title	Published	Views	Family All 7
Prion	Design/Logic Flaw	8 May 201414:29	–	prion
Tenable Nessus	Jenkins < 1.545 Subversion Plugin Information Disclosure	28 Feb 201400:00	–	nessus
Veracode	Information Disclosure	2 May 201904:55	–	veracode
NVD	CVE-2013-6372	8 May 201414:29	–	nvd
CVE	CVE-2013-6372	8 May 201414:29	–	cve
Cvelist	CVE-2013-6372	8 May 201414:00	–	cvelist
OSV	Red Hat Bug Fix Advisory: Red Hat OpenShift Enterprise 2.1 jenkins-plugin-openshift bug fix update	15 Sep 202422:07	–	osv

Source	Link
github	www.github.com/jenkinsci/subversion-plugin/commit/7d4562d6f7e40de04bbe29577b51c79f07d05ba6
wiki	www.wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-6372
launchpad	www.launchpad.net/bugs/cve/CVE-2013-6372
security-tracker	www.security-tracker.debian.org/tracker/CVE-2013-6372

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 May 2014 00:00Current

3.7Low risk

Vulners AI Score3.7

CVSS22.1

EPSS0.000