Jenkins allows Remote Attackers to Hijack Sessions

GHSA ID

GHSA-9c26-cf8c-mw43

CVE ID

CVE-2014-2060

Severity

medium

Published

2022-05-17T03:53:55Z

Updated

2025-03-13T19:17:40Z

CVSS v4

6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Description

References

• https://nvd.nist.gov/vuln/detail/CVE-2014-2060 ↗
• https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14 ↗
• http://www.openwall.com/lists/oss-security/2014/02/21/2 ↗
• https://github.com/advisories/GHSA-9c26-cf8c-mw43 ↗