CVE-2014-3662

Description

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.

Risk Information

Base Score
8.6
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
0.107

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Jenkins 1.582Windows
Multiple vulnerabilities are fixed in Jenkins-Core 1.583Windows
Multiple vulnerabilities are fixed in Jenkins-Core 1.565.3Windows
Multiple vulnerabilities affected in Jenkins 1.582 (For Ubuntu)Linux
Multiple vulnerabilities affected in Jenkins 1.582 (For Debian)Linux
Multiple vulnerabilities affected in Jenkins 1.582 (For Centos)Linux
Multiple vulnerabilities affected in Jenkins 1.582 (For RedHat)Linux
Multiple vulnerabilities affected in Jenkins 1.582 (For Suse)Linux
Multiple vulnerabilities are fixed in Jenkins-Core for Linux 1.583Linux
Multiple vulnerabilities are fixed in Jenkins-Core for Linux 1.565.3Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234