CVE-2012-4438

Опубликовано: 18 нояб. 2019

Источник: debian

Описание

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
jenkins	fixed	1.447.2+dfsg-2		package

Примечания

http://web.archive.org/web/20130606043312/http://web.archive.org/web/20130606043312/http://web.archive.org/web/20130606043312/http://web.archive.org/web/20130606043312/http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-09-17.cb

Связанные уязвимости

CVE-2012-4438

CVSS3: 8.8

ubuntu

около 6 лет назад

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.

CVE-2012-4438

redhat

больше 13 лет назад

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.

CVE-2012-4438

CVSS3: 8.8

nvd

около 6 лет назад

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.

GHSA-wr6p-j63r-xqhv

CVSS3: 8.8

github

почти 4 года назад

Jenkins allows Data Insertion and Execution of Code by those with Read and HTTP Access