Home

CVE-2014-2060

Description

The Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack sessions via unspecified vectors.

Risk Information

Base Score
9.1
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
Exploitation Probability
0.145

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Jenkins 1.550Windows
Multiple vulnerabilities are fixed in Jenkins-Core 1.551Windows
Multiple vulnerabilities are fixed in Jenkins-Core 1.532.2Windows
Multiple vulnerabilities affected in Jenkins 1.550 (For Ubuntu)Linux
Multiple vulnerabilities affected in Jenkins 1.550 (For Debian)Linux
Multiple vulnerabilities affected in Jenkins 1.550 (For Centos)Linux
Multiple vulnerabilities affected in Jenkins 1.550 (For RedHat)Linux
Multiple vulnerabilities affected in Jenkins 1.550 (For Suse)Linux
Multiple vulnerabilities are fixed in Jenkins-Core for Linux 1.551Linux
Multiple vulnerabilities are fixed in Jenkins-Core for Linux 1.532.2Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234