high8.8
CVE-2012-4438
Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrar…
Impact
Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Jenkins | before 1.466.2 before 1.482 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2012/09/21/2
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4438
- https://security-tracker.debian.org/tracker/CVE-2012-4438
- https://www.cloudbees.com/jenkins-security-advisory-2012-09-17
- http://www.openwall.com/lists/oss-security/2012/09/21/2
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4438
- https://security-tracker.debian.org/tracker/CVE-2012-4438
- https://www.cloudbees.com/jenkins-security-advisory-2012-09-17