CVE-2013-6372 Jenkins Subversion Plugin Stores Credentials with Base64 Encoding
LowCVSS 2.1
EPSS 0.50%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.jenkins-ci.plugins/subversion(Maven) | < 1.54 | 1.54 |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.24 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.25 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.26 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.28 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.29 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.30 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.31 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.32 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.33 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.34 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.35 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.36 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.37 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.38 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.39 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.40 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.41 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.42 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.43 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.44 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.45 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.48 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.50 | No fix listed |
| org.jenkins-ci.plugins/subversion(Maven) | = 1.51 | No fix listed |
Show 55 more
| Product | Affected versions | Fixed in |
|---|---|---|
| org.jenkins-ci.plugins/subversion(Maven) | = 1.53 | No fix listed |
| jenkins-ci subversion-plugin | <= 1.53 | No fix listed |
| jenkins-ci subversion-plugin | = 1.0 | No fix listed |
| jenkins-ci subversion-plugin | = 1.1 | No fix listed |
| jenkins-ci subversion-plugin | = 1.2 | No fix listed |
| jenkins-ci subversion-plugin | = 1.3 | No fix listed |
| jenkins-ci subversion-plugin | = 1.4 | No fix listed |
| jenkins-ci subversion-plugin | = 1.5 | No fix listed |
| jenkins-ci subversion-plugin | = 1.6 | No fix listed |
| jenkins-ci subversion-plugin | = 1.7 | No fix listed |
| jenkins-ci subversion-plugin | = 1.8 | No fix listed |
| jenkins-ci subversion-plugin | = 1.9 | No fix listed |
| jenkins-ci subversion-plugin | = 1.10 | No fix listed |
| jenkins-ci subversion-plugin | = 1.11 | No fix listed |
| jenkins-ci subversion-plugin | = 1.12 | No fix listed |
| jenkins-ci subversion-plugin | = 1.13 | No fix listed |
| jenkins-ci subversion-plugin | = 1.14 | No fix listed |
| jenkins-ci subversion-plugin | = 1.15 | No fix listed |
| jenkins-ci subversion-plugin | = 1.16 | No fix listed |
| jenkins-ci subversion-plugin | = 1.17 | No fix listed |
| jenkins-ci subversion-plugin | = 1.18 | No fix listed |
| jenkins-ci subversion-plugin | = 1.19 | No fix listed |
| jenkins-ci subversion-plugin | = 1.20 | No fix listed |
| jenkins-ci subversion-plugin | = 1.21 | No fix listed |
| jenkins-ci subversion-plugin | = 1.22 | No fix listed |
| jenkins-ci subversion-plugin | = 1.23 | No fix listed |
| jenkins-ci subversion-plugin | = 1.24 | No fix listed |
| jenkins-ci subversion-plugin | = 1.25 | No fix listed |
| jenkins-ci subversion-plugin | = 1.26 | No fix listed |
| jenkins-ci subversion-plugin | = 1.27 | No fix listed |
| jenkins-ci subversion-plugin | = 1.28 | No fix listed |
| jenkins-ci subversion-plugin | = 1.29 | No fix listed |
| jenkins-ci subversion-plugin | = 1.30 | No fix listed |
| jenkins-ci subversion-plugin | = 1.31 | No fix listed |
| jenkins-ci subversion-plugin | = 1.32 | No fix listed |
| jenkins-ci subversion-plugin | = 1.33 | No fix listed |
| jenkins-ci subversion-plugin | = 1.34 | No fix listed |
| jenkins-ci subversion-plugin | = 1.35 | No fix listed |
| jenkins-ci subversion-plugin | = 1.36 | No fix listed |
| jenkins-ci subversion-plugin | = 1.37 | No fix listed |
| jenkins-ci subversion-plugin | = 1.38 | No fix listed |
| jenkins-ci subversion-plugin | = 1.39 | No fix listed |
| jenkins-ci subversion-plugin | = 1.40 | No fix listed |
| jenkins-ci subversion-plugin | = 1.41 | No fix listed |
| jenkins-ci subversion-plugin | = 1.42 | No fix listed |
| jenkins-ci subversion-plugin | = 1.43 | No fix listed |
| jenkins-ci subversion-plugin | = 1.44 | No fix listed |
| jenkins-ci subversion-plugin | = 1.45 | No fix listed |
| jenkins-ci subversion-plugin | = 1.46 | No fix listed |
| jenkins-ci subversion-plugin | = 1.47 | No fix listed |
| jenkins-ci subversion-plugin | = 1.48 | No fix listed |
| jenkins-ci subversion-plugin | = 1.49 | No fix listed |
| jenkins-ci subversion-plugin | = 1.50 | No fix listed |
| jenkins-ci subversion-plugin | = 1.51 | No fix listed |
| jenkins-ci subversion-plugin | = 1.52 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit patch
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- github.com product
- wiki.jenkins-ci.org vendor-advisory
- github.com