{"api_version":"1","generated_at":"2026-07-23T08:37:38+00:00","cve":"CVE-2013-2034","urls":{"html":"https://cve.report/CVE-2013-2034","api":"https://cve.report/api/cve/CVE-2013-2034.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-2034","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-2034"},"summary":{"title":"CVE-2013-2034","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary code or (2) initiate deployment of binaries to a Maven repository via unspecified vectors.","state":"PUBLISHED","assigner":"redhat","published_at":"2014-05-14 19:55:07","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-352","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-05-02.cb","name":"http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-05-02.cb","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"CloudBees: The Java PaaS Company","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://osvdb.org/92981","name":"http://osvdb.org/92981","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHEA-2013:1032","name":"MISC:https://access.redhat.com/errata/RHEA-2013:1032","refsource":"MITRE","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://access.redhat.com/security/cve/CVE-2013-2034","name":"MISC:https://access.redhat.com/security/cve/CVE-2013-2034","refsource":"MITRE","tags":[],"title":"CVE-2013-2034 - Red Hat Customer Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=958958","name":"MISC:https://bugzilla.redhat.com/show_bug.cgi?id=958958","refsource":"MITRE","tags":[],"title":"958958 – (CVE-2013-2034) CVE-2013-2034 Jenkins: Multiple CSRF in MavenAbstractArtifactRecord.doRedeploy and Jenkins.doEval","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://issues.jenkins-ci.org/browse/SECURITY-63","name":"MISC:https://issues.jenkins-ci.org/browse/SECURITY-63","refsource":"MITRE","tags":[],"title":"Log in - Jenkins JIRA","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://issues.jenkins-ci.org/browse/SECURITY-69","name":"MISC:https://issues.jenkins-ci.org/browse/SECURITY-69","refsource":"MITRE","tags":[],"title":"Log in - Jenkins JIRA","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-05-02","name":"MISC:https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-05-02","refsource":"MITRE","tags":[],"title":"Jenkins Security Advisory 2013-05-02 - Security Advisories - Jenkins Wiki","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2034","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2034","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"2034","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cloudbees","cpe5":"jenkins","cpe6":"1.466","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"enterprise","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2034","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cloudbees","cpe5":"jenkins","cpe6":"1.480","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"enterprise","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2034","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cloudbees","cpe5":"jenkins","cpe6":"1.509","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"lts","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"2034","vulnerable":"1","versionEndIncluding":"1.513","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cloudbees","cpe5":"jenkins","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T15:20:37.470Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-05-02.cb"},{"name":"92981","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/92981"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2013-05-02T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary code or (2) initiate deployment of binaries to a Maven repository via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-06-09T13:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-05-02.cb"},{"name":"92981","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/92981"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2013-2034","datePublished":"2014-05-14T19:00:00.000Z","dateReserved":"2013-02-19T00:00:00.000Z","dateUpdated":"2024-08-06T15:20:37.470Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-05-14 19:55:07","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-352","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cloudbees:jenkins:*:*:*:*:*:*:*:*","versionEndIncluding":"1.513","matchCriteriaId":"1883ADFF-74C1-4A59-8F45-392810E89E64"},{"vulnerable":true,"criteria":"cpe:2.3:a:cloudbees:jenkins:1.466:*:*:*:enterprise:*:*:*","matchCriteriaId":"B055B30F-8650-419D-8A17-681FB96762E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cloudbees:jenkins:1.480:*:*:*:enterprise:*:*:*","matchCriteriaId":"01F691EE-11D4-47CD-A07B-1002CAAB0EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cloudbees:jenkins:1.509:*:*:*:lts:*:*:*","matchCriteriaId":"32675A89-01CA-4D22-9C78-9334036CC9D0"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"2034","Ordinal":"1","Title":"CVE-2013-2034","CVE":"CVE-2013-2034","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"2034","Ordinal":"1","NoteData":"Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary code or (2) initiate deployment of binaries to a Maven repository via unspecified vectors.","Type":"Description","Title":"CVE-2013-2034"},{"CveYear":"2013","CveId":"2034","Ordinal":"2","NoteData":"2014-05-14","Type":"Other","Title":"Published"},{"CveYear":"2013","CveId":"2034","Ordinal":"3","NoteData":"2016-06-09","Type":"Other","Title":"Modified"}]}}}