CVE-2013-0158: cloudbees jenkins
Vulnerability summary
CVE-2013-0158 is a low (CVSS 2.6) vulnerability in cloudbees jenkins. EPSS estimates a 2.46% chance of exploitation in the next 30 days, higher than 84.1% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 24-02-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown vectors.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.46%
Chance of exploitation in the next 30 days
Percentile
84%
Versus all other CVEs
30-day change
0.00 pp
From 2.46% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Cloudbees1 product
- jenkins≤ 1.480.3.1 | 1.466.1.2 | 1.466.2.1 | 1.400 | 1.424 | 1.447 | 1.447.1.1 | 1.447.2.2 | 1.447.3.1
Jenkins1 product
- jenkins1.400 | 1.401 | 1.402 | 1.403 | 1.404 | 1.405 | 1.406 | 1.407 | 1.408 | 1.409 | 1.410 | 1.411 | 1.412 | 1.413 | 1.414 | 1.415 | 1.416 | 1.417 | 1.418 | 1.419 | 1.420 | 1.421 | 1.422 | 1.423 | 1.424 | 1.425 | 1.426 | 1.427 | 1.428 | 1.429 | 1.430 | 1.431 | 1.432 | 1.433 | 1.434 | 1.435 | 1.436 | 1.437 | ≤ 1.466.2 | 1.409.1 | 1.409.2 | 1.409.3 | 1.424.1 | 1.424.2 | 1.424.3 | 1.424.4 | 1.424.5 | 1.424.6 | 1.447.1 | 1.447.2 | 1.466.1
Org.jenkins-ci.main1 product
- jenkins-core≥ 1.481, < 1.498 | < 1.480.2
3 vendors · 3 products
References
18 links- wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-01-04X Refsource CONFIRMVendor AdvisoryWEB
- www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-01-04.cbX Refsource CONFIRMVendor AdvisoryWEB
Show all 18 references
- github.com/jenkinsci/jenkinsPACKAGE