CVE Vulnerabilities

CVE-2013-6372

Published: May 08, 2014 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V3
Ubuntu
LOW

The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.

Affected Software

Name Vendor Start Version End Version
Subversion-plugin Jenkins-ci * 1.53 (including)
Subversion-plugin Jenkins-ci 1.0 (including) 1.0 (including)
Subversion-plugin Jenkins-ci 1.1 (including) 1.1 (including)
Subversion-plugin Jenkins-ci 1.2 (including) 1.2 (including)
Subversion-plugin Jenkins-ci 1.3 (including) 1.3 (including)
Subversion-plugin Jenkins-ci 1.4 (including) 1.4 (including)
Subversion-plugin Jenkins-ci 1.5 (including) 1.5 (including)
Subversion-plugin Jenkins-ci 1.6 (including) 1.6 (including)
Subversion-plugin Jenkins-ci 1.7 (including) 1.7 (including)
Subversion-plugin Jenkins-ci 1.8 (including) 1.8 (including)
Subversion-plugin Jenkins-ci 1.9 (including) 1.9 (including)
Subversion-plugin Jenkins-ci 1.10 (including) 1.10 (including)
Subversion-plugin Jenkins-ci 1.11 (including) 1.11 (including)
Subversion-plugin Jenkins-ci 1.12 (including) 1.12 (including)
Subversion-plugin Jenkins-ci 1.13 (including) 1.13 (including)
Subversion-plugin Jenkins-ci 1.14 (including) 1.14 (including)
Subversion-plugin Jenkins-ci 1.15 (including) 1.15 (including)
Subversion-plugin Jenkins-ci 1.16 (including) 1.16 (including)
Subversion-plugin Jenkins-ci 1.17 (including) 1.17 (including)
Subversion-plugin Jenkins-ci 1.18 (including) 1.18 (including)
Subversion-plugin Jenkins-ci 1.19 (including) 1.19 (including)
Subversion-plugin Jenkins-ci 1.20 (including) 1.20 (including)
Subversion-plugin Jenkins-ci 1.21 (including) 1.21 (including)
Subversion-plugin Jenkins-ci 1.22 (including) 1.22 (including)
Subversion-plugin Jenkins-ci 1.23 (including) 1.23 (including)
Subversion-plugin Jenkins-ci 1.24 (including) 1.24 (including)
Subversion-plugin Jenkins-ci 1.25 (including) 1.25 (including)
Subversion-plugin Jenkins-ci 1.26 (including) 1.26 (including)
Subversion-plugin Jenkins-ci 1.27 (including) 1.27 (including)
Subversion-plugin Jenkins-ci 1.28 (including) 1.28 (including)
Subversion-plugin Jenkins-ci 1.29 (including) 1.29 (including)
Subversion-plugin Jenkins-ci 1.30 (including) 1.30 (including)
Subversion-plugin Jenkins-ci 1.31 (including) 1.31 (including)
Subversion-plugin Jenkins-ci 1.32 (including) 1.32 (including)
Subversion-plugin Jenkins-ci 1.33 (including) 1.33 (including)
Subversion-plugin Jenkins-ci 1.34 (including) 1.34 (including)
Subversion-plugin Jenkins-ci 1.35 (including) 1.35 (including)
Subversion-plugin Jenkins-ci 1.36 (including) 1.36 (including)
Subversion-plugin Jenkins-ci 1.37 (including) 1.37 (including)
Subversion-plugin Jenkins-ci 1.38 (including) 1.38 (including)
Subversion-plugin Jenkins-ci 1.39 (including) 1.39 (including)
Subversion-plugin Jenkins-ci 1.40 (including) 1.40 (including)
Subversion-plugin Jenkins-ci 1.41 (including) 1.41 (including)
Subversion-plugin Jenkins-ci 1.42 (including) 1.42 (including)
Subversion-plugin Jenkins-ci 1.43 (including) 1.43 (including)
Subversion-plugin Jenkins-ci 1.44 (including) 1.44 (including)
Subversion-plugin Jenkins-ci 1.45 (including) 1.45 (including)
Subversion-plugin Jenkins-ci 1.46 (including) 1.46 (including)
Subversion-plugin Jenkins-ci 1.47 (including) 1.47 (including)
Subversion-plugin Jenkins-ci 1.48 (including) 1.48 (including)
Subversion-plugin Jenkins-ci 1.49 (including) 1.49 (including)
Subversion-plugin Jenkins-ci 1.50 (including) 1.50 (including)
Subversion-plugin Jenkins-ci 1.51 (including) 1.51 (including)
Subversion-plugin Jenkins-ci 1.52 (including) 1.52 (including)
Red Hat OpenShift Enterprise 2.1 RedHat jenkins-0:1.565.3-1.el6op *
Red Hat OpenShift Enterprise 2.1 RedHat jenkins-plugin-openshift-0:0.6.40.1-0.el6op *
Red Hat OpenShift Enterprise 2.1 RedHat openshift-origin-cartridge-jenkins-0:1.20.3.5-1.el6op *
Jenkins Ubuntu upstream *

References