{"id":"CVE-2013-0158","published":"2013-02-24T22:00:00Z","modified":"2024-08-06T14:18:09Z","title":"Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown vectors.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.02455,"percentile":0.84352,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2013-03-14","exploitedFirstSeen":"2013-03-14","ransomware":false,"evidence":[{"url":"https://securelist.com/new-uyghur-and-tibetan-themed-attacks-using-pdf-exploits/35465/","date":"2013-03-14"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://github.com/jenkinsci/jenkins/commit/3dc13b957b14cec649036e8dd517f0f9cb21fb04","tags":["x_refsource_CONFIRM"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0220.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://github.com/jenkinsci/jenkins/commit/c3d8e05a1b3d58b6c4dcff97394cb3a79608b4b2","tags":["x_refsource_CONFIRM"]},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-01-04","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/jenkinsci/jenkins/commit/4895eaafca468b7f0f1a3166b2fca7414f0d5da5","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/jenkinsci/jenkins/commit/a9aff088f327278a8873aef47fa8f80d3c5932fd","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/jenkinsci/jenkins/commit/94a8789b699132dd706021a6be1b78bc47f19602","tags":["x_refsource_CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2013/01/07/4","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=892795","tags":["x_refsource_MISC"]},{"url":"http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-01-04.cb","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Maven","package":"org.jenkins-ci.main:jenkins-core","vulnerableRanges":[">=1.481, <1.498","<1.480.2"],"patched":["1.498","1.480.2"],"from":["GHSA-jwfr-h6jp-9p2g"],"provenance":"source"}],"advisories":[{"id":"GHSA-jwfr-h6jp-9p2g","url":"https://github.com/advisories/GHSA-jwfr-h6jp-9p2g","severity":"LOW","ecosystem":"Maven","package":"org.jenkins-ci.main:jenkins-core","vulnerableRanges":[">=1.481, <1.498"],"patched":["1.498"],"provenance":"source","from":"GHSA"},{"id":"GHSA-jwfr-h6jp-9p2g","url":"https://github.com/advisories/GHSA-jwfr-h6jp-9p2g","severity":"LOW","ecosystem":"Maven","package":"org.jenkins-ci.main:jenkins-core","vulnerableRanges":["<1.480.2"],"patched":["1.480.2"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2022-4445","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4445","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2013-02-24","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2013-0158","provenance":"source"},{"date":"2013-03-14","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://securelist.com/new-uyghur-and-tibetan-themed-attacks-using-pdf-exploits/35465/","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":51.9,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 4977 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":16.87,"detail":"percentile 0.8435"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-jenkins-cve-2013-0158","children":[{"from":"CVE-2013-0158","to":"CVE-2019-10354","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["core/src/main/java/jenkins/model/Jenkins.java"],"commits":["https://github.com/jenkinsci/jenkins/commit/3dc13b957b14cec649036e8dd517f0f9cb21fb04","https://github.com/jenkinsci/jenkins/commit/c3d8e05a1b3d58b6c4dcff97394cb3a79608b4b2","https://github.com/jenkinsci/jenkins/commit/279d8109eddb7a494428baf25af9756c2e33576b"],"basis":"shared function","functions":["Jenkins"]}]}],"packageHistory":[{"cve":"CVE-2012-6072","published":"2013-02-24","fixed":"1.491","kev":false},{"cve":"CVE-2012-6073","published":"2013-02-24","fixed":"1.491","kev":false,"link":{"from":"CVE-2012-6073","to":"CVE-2013-0158","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.jenkins-ci.main:jenkins-core","fromFixed":"1.491","toFixed":"1.498","daysApart":0}]}},{"cve":"CVE-2012-6074","published":"2013-02-24","fixed":"1.491","kev":false},{"cve":"CVE-2013-0158","published":"2013-02-24","fixed":"1.498","kev":false},{"cve":"CVE-2013-0327","published":"2013-03-19","fixed":"1.502","kev":false},{"cve":"CVE-2013-0328","published":"2013-03-19","fixed":"1.502","kev":false},{"cve":"CVE-2013-0329","published":"2013-03-19","fixed":"1.502","kev":false}],"package":"Maven:org.jenkins-ci.main:jenkins-core"}}