CVE-2016-0789 in Jenkins

요약

\~에 의해 MITRE

CRLF injection vulnerability in the CLI command documentation in CloudBees Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

• 예약하다: 2015. 12. 16.
• 공개: 2016. 04. 07.
• 모더레이션: 수락
• 항목: VDB-81698
• CPE: 준비됨
• CWE: CWE-20 (확인됨)
• CVSS: 6.1 (NVD)
• EPSS: 0.01790
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Pharma, Telecommunication, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0789
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0789
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0789/