Veracode Vulnerability DatabaseVERACODE:14793Session Fixation
0.007 Low
EPSS
Percentile
80.6%
jenkins is vulnerable to session fixation. The vulnerability exists through the override of Jenkins cookies.
References
www.openwall.com/lists/oss-security/2014/02/21/2
access.redhat.com/security/cve/CVE-2013-5573
access.redhat.com/security/cve/CVE-2013-6372
access.redhat.com/security/cve/CVE-2013-7330
access.redhat.com/security/cve/CVE-2014-2059
access.redhat.com/security/cve/CVE-2014-2060
access.redhat.com/security/cve/CVE-2014-2061
access.redhat.com/security/cve/CVE-2014-2062
access.redhat.com/security/cve/CVE-2014-2063
access.redhat.com/security/cve/CVE-2014-2064
access.redhat.com/security/cve/CVE-2014-2065
access.redhat.com/security/cve/CVE-2014-2066
access.redhat.com/security/cve/CVE-2014-2067
access.redhat.com/security/cve/CVE-2014-2068
access.redhat.com/security/cve/CVE-2014-3661
access.redhat.com/security/cve/CVE-2014-3662
access.redhat.com/security/cve/CVE-2014-3663
access.redhat.com/security/cve/CVE-2014-3664
access.redhat.com/security/cve/CVE-2014-3665
access.redhat.com/security/cve/CVE-2014-3666
access.redhat.com/security/cve/CVE-2014-3667
access.redhat.com/security/cve/CVE-2014-3678
access.redhat.com/security/cve/CVE-2014-3681
bugzilla.redhat.com/show_bug.cgi?id=1127667
github.com/jenkinsci/jenkins/commit/8ac74c350779921598f9d5edfed39dd35de8842a
rhn.redhat.com/errata/RHBA-2014-1630.html
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
Related
