CVE-2013-0158

EXPLOITED

Jenkins < 1.498 - Unauthenticated Cryptographic Key Exposure

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2013-0158 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown vectors.

References (10)

Core 10
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0220.html
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/01/07/4
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=892795

Scores

EPSS 0.0245
EPSS Percentile 82.3%

Details

VulnCheck KEV 2013-03-14
Status published
Products (50)
cloudbees/jenkins 1.466.1.2
cloudbees/jenkins 1.466.2.1
cloudbees/jenkins 1.400
cloudbees/jenkins 1.424
cloudbees/jenkins 1.447
cloudbees/jenkins 1.447.1.1
cloudbees/jenkins 1.447.2.2
cloudbees/jenkins 1.447.3.1
cloudbees/jenkins < 1.480.3.1
jenkins/jenkins 1.400
... and 40 more
Published Feb 24, 2013
Tracked Since Feb 18, 2026