Detections
Analytics

CVE-2012-4438

high

Description

Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins master to insert data and execute arbitrary code.

References

https://security-tracker.debian.org/tracker/CVE-2012-4438

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4438

http://www.openwall.com/lists/oss-security/2012/09/21/2

https://www.cloudbees.com/jenkins-security-advisory-2012-09-17

Details

Source: Mitre, NVD

Published: 2019-11-18

Updated: 2019-11-20

Risk Information

CVSS v2

Base Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.01121