high7.5
CVE-2013-0329
Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vec…
Impact
Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Jenkins | through 1.480.2 through 1.501 |
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2013-0638.html
- http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb
- http://www.openwall.com/lists/oss-security/2013/02/21/7
- https://bugzilla.redhat.com/show_bug.cgi?id=914877
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
- http://rhn.redhat.com/errata/RHSA-2013-0638.html
- http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb
- http://www.openwall.com/lists/oss-security/2013/02/21/7
- https://bugzilla.redhat.com/show_bug.cgi?id=914877
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16