CVE-2014-2062

Jenkins <1.551-LTS <1.532.2 - Auth Bypass

Title source: llm

Description

Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remote authenticated users to retain access via the token.

References (3)

Scores

EPSS 0.0019
EPSS Percentile 40.2%

Classification

CWE
CWE-287
Status draft

Affected Products (3)

jenkins/jenkins < 1.532.1
jenkins/jenkins < 1.550
org.jenkins-ci.main/jenkins-core < 1.551Maven

Timeline

Published Oct 17, 2014
Tracked Since Feb 18, 2026