Jenkins Exclusion Plugin CVE-2013-6373 Unspecified Security Bypass Vulnerability
BID:63876
Info
Jenkins Exclusion Plugin CVE-2013-6373 Unspecified Security Bypass Vulnerability
| Bugtraq ID: | 63876 |
| Class: | Unknown |
| CVE: |
CVE-2013-6373 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 21 2013 12:00AM |
| Updated: | Dec 02 2013 12:28AM |
| Credit: | mwebber |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Jenkins Exclusion Plugin CVE-2013-6373 Unspecified Security Bypass Vulnerability
The Exclusion plugin for Jenkins is prone to an unspecified security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized access to resource locks of the affected application. This may aid in launching further attacks.
Versions prior to Exclusion plugin 0.9 are vulnerable.
The Exclusion plugin for Jenkins is prone to an unspecified security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized access to resource locks of the affected application. This may aid in launching further attacks.
Versions prior to Exclusion plugin 0.9 are vulnerable.
Exploit / POC
Jenkins Exclusion Plugin CVE-2013-6373 Unspecified Security Bypass Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Jenkins Exclusion Plugin CVE-2013-6373 Unspecified Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Jenkins Exclusion Plugin CVE-2013-6373 Unspecified Security Bypass Vulnerability
References:
References:
- Jenkins CI Homepage (Jenkins CI)