Jenkins BuildTrigger Class Security Bypass Vulnerability
BID:65718
Info
Jenkins BuildTrigger Class Security Bypass Vulnerability
| Bugtraq ID: | 65718 |
| Class: | Unknown |
| CVE: |
CVE-2013-7330 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 11 2014 12:00AM |
| Updated: | Feb 11 2014 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Jenkins-Ci Jenkins 1.550 Jenkins-Ci Jenkins 1.532.1 |
| Not Vulnerable: | |
Discussion
Jenkins BuildTrigger Class Security Bypass Vulnerability
Jenkins is prone to a security-bypass vulnerability.
An attacker may leverage this issue to bypass certain security restrictions and perform unauthorized actions.
Jenkins is prone to a security-bypass vulnerability.
An attacker may leverage this issue to bypass certain security restrictions and perform unauthorized actions.
Exploit / POC
Jenkins BuildTrigger Class Security Bypass Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Jenkins BuildTrigger Class Security Bypass Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Jenkins BuildTrigger Class Security Bypass Vulnerability
References:
References:
- [SECURITY-55] (GitHub)
- Bug 1067799 - (CVE-2013-7330) CVE-2013-7330 jenkins: configure a project you do (Red Hat Bugzilla)
- Jenkins CI Homepage (Jenkins CI)
- Jenkins Security Advisory 2014-02-14 (Jenkins CI)