National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

CVE-2013-0158 Detail

Current Description

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown vectors.

Source:  MITRE
Description Last Modified:  06/10/2016
View Analysis Description

Impact

CVSS v2.0 Severity and Metrics:

Base Score: 2.6 LOW
Vector: (AV:N/AC:H/Au:N/C:P/I:N/A:N) (V2 legend)
Impact Subscore: 2.9
Exploitability Subscore: 4.9


Access Vector (AV): Network
Access Complexity (AC): High
Authentication (AU): None
Confidentiality (C): Partial
Integrity (I): None
Availability (A): None
Additional Information:
Allows unauthorized disclosure of information

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink Resource
http://rhn.redhat.com/errata/RHSA-2013-0220.html
http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-01-04.cb Vendor Advisory
http://www.openwall.com/lists/oss-security/2013/01/07/4
https://bugzilla.redhat.com/show_bug.cgi?id=892795
https://github.com/jenkinsci/jenkins/commit/3dc13b957b14cec649036e8dd517f0f9cb21fb04
https://github.com/jenkinsci/jenkins/commit/4895eaafca468b7f0f1a3166b2fca7414f0d5da5
https://github.com/jenkinsci/jenkins/commit/94a8789b699132dd706021a6be1b78bc47f19602
https://github.com/jenkinsci/jenkins/commit/a9aff088f327278a8873aef47fa8f80d3c5932fd
https://github.com/jenkinsci/jenkins/commit/c3d8e05a1b3d58b6c4dcff97394cb3a79608b4b2
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-01-04 Vendor Advisory

Technical Details

Vulnerability Type (View All)

Known Affected Software Configurations Switch to CPE 2.3

Configuration 1 ( hide )
 cpe:/a:cloudbees:jenkins
     Show Matching CPE(s)
Up to (including)
1.480.3.1
 cpe:/a:jenkins:jenkins:1.400
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.401
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.402
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.403
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.404
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.405
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.406
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.407
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.408
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.409
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.410
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.411
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.412
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.413
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.414
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.415
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.416
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.417
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.418
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.419
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.420
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.421
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.422
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.423
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.424
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.425
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.426
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.427
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.428
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.429
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.430
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.431
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.432
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.433
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.434
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.435
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.436
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.437
     Show Matching CPE(s)

Configuration 2 ( hide )
 cpe:/a:cloudbees:jenkins:1.466.1.2:-:enterprise
     Show Matching CPE(s)
 cpe:/a:cloudbees:jenkins:1.466.2.1:-:enterprise
     Show Matching CPE(s)

Configuration 3 ( hide )
 cpe:/a:cloudbees:jenkins:1.400:-:lts
     Show Matching CPE(s)
 cpe:/a:cloudbees:jenkins:1.424:-:lts
     Show Matching CPE(s)
 cpe:/a:cloudbees:jenkins:1.447:-:lts
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.409.1
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.409.1
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.409.2
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.409.2
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.409.3
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.424.1
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.424.2
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.424.3
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.424.4
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.424.5
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.424.6
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.447.1
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.447.2
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins:1.466.1
     Show Matching CPE(s)
 cpe:/a:jenkins:jenkins
     Show Matching CPE(s)
Up to (including)
1.466.2

Configuration 4 ( hide )
 cpe:/a:cloudbees:jenkins:1.447.1.1:-:enterprise
     Show Matching CPE(s)
 cpe:/a:cloudbees:jenkins:1.447.2.2:-:enterprise
     Show Matching CPE(s)
 cpe:/a:cloudbees:jenkins:1.447.3.1:-:enterprise
     Show Matching CPE(s)


Change History

57 change records found - show changes

Quick Info

CVE Dictionary Entry:
CVE-2013-0158
NVD Published Date:
02/24/2013
NVD Last Modified:
10/30/2018