CVE-2012-6072 in Jenkins

Riassunto

di MITRE

CRLF injection vulnerability in CloudBees Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 06/12/2012
• Divulgazione: 24/02/2013
• Moderazione: accettato
• Voce: VDB-63641
• CPE: pronto
• CWE: CWE-20 (confermato)
• CVSS: 4.3 (NVD)
• EPSS: 0.00099
• KEV: no
• Attività: molto basso
• Settore: Pharma, Insurance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-6072
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-6072
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-6072/