Jenkins BuildTrigger Class CVE-2014-2058 Incomplete Fix Security Bypass Vulnerability
BID:65720
Info
Jenkins BuildTrigger Class CVE-2014-2058 Incomplete Fix Security Bypass Vulnerability
| Bugtraq ID: | 65720 |
| Class: | Unknown |
| CVE: |
CVE-2014-2058 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 15 2014 12:00AM |
| Updated: | Feb 15 2014 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Jenkins-Ci Jenkins 1.550 Jenkins-Ci Jenkins 1.532.1 |
| Not Vulnerable: |
Jenkins-Ci Jenkins 1.551 Jenkins-Ci Jenkins 1.532.2 |
Exploit / POC
Jenkins BuildTrigger Class CVE-2014-2058 Incomplete Fix Security Bypass Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
References
Jenkins BuildTrigger Class CVE-2014-2058 Incomplete Fix Security Bypass Vulnerability
References:
References:
- [FIXED SECURITY-109] SECURITY-55 fix to BuildTrigger configuration fa�?� (GitHub)
- Bug 1067799 - (CVE-2013-7330) CVE-2013-7330 jenkins: configure a project you do (Red Hat Bugzilla)
- Jenkins CI Homepage (Jenkins CI)
- Jenkins Security Advisory 2014-02-14 (Jenkins CI)