VulnerabilityModified
CVE-2013-0330
Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitrary jobs via unknown attack vectors.
MEDIUM 4.0EPSS 1.76%
Does this matter?
Lower severity and a low EPSS score (1.76%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitrary jobs via unknown attack vectors.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
- EPSS
- 1.76% probability · 77th percentile
- CISA KEV
- Not listed
- Affected
- jenkins/jenkins
- Source
- secalert@redhat.com
References
- http://rhn.redhat.com/errata/RHSA-2013-0638.html
- http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cbVendor Advisory
- http://www.openwall.com/lists/oss-security/2013/02/21/7
- http://www.securityfocus.com/bid/57994
- https://bugzilla.redhat.com/show_bug.cgi?id=914878
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
- http://rhn.redhat.com/errata/RHSA-2013-0638.html
- http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cbVendor Advisory
- http://www.openwall.com/lists/oss-security/2013/02/21/7
- http://www.securityfocus.com/bid/57994
- https://bugzilla.redhat.com/show_bug.cgi?id=914878
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.