CVEvulnerability
CVE-2013-6372
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-05-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.
Affected configurations
• jenkins-ci subversion-plugin (<= 1.53)
• jenkins-ci subversion-plugin 1.0
• jenkins-ci subversion-plugin 1.1
• jenkins-ci subversion-plugin 1.2
• jenkins-ci subversion-plugin 1.3
• jenkins-ci subversion-plugin 1.4
• jenkins-ci subversion-plugin 1.5
• jenkins-ci subversion-plugin 1.6
• jenkins-ci subversion-plugin 1.7
• jenkins-ci subversion-plugin 1.8
• jenkins-ci subversion-plugin 1.9
• jenkins-ci subversion-plugin 1.10
• jenkins-ci subversion-plugin 1.11
• jenkins-ci subversion-plugin 1.12
• jenkins-ci subversion-plugin 1.13
• jenkins-ci subversion-plugin 1.14
• jenkins-ci subversion-plugin 1.15
• jenkins-ci subversion-plugin 1.16
• jenkins-ci subversion-plugin 1.17
• jenkins-ci subversion-plugin 1.18
• jenkins-ci subversion-plugin 1.19
• jenkins-ci subversion-plugin 1.20
• jenkins-ci subversion-plugin 1.21
• jenkins-ci subversion-plugin 1.22
• jenkins-ci subversion-plugin 1.23
• jenkins-ci subversion-plugin 1.24
• jenkins-ci subversion-plugin 1.25
• jenkins-ci subversion-plugin 1.26
• jenkins-ci subversion-plugin 1.27
• jenkins-ci subversion-plugin 1.28
• jenkins-ci subversion-plugin 1.29
• jenkins-ci subversion-plugin 1.30
• jenkins-ci subversion-plugin 1.31
• jenkins-ci subversion-plugin 1.32
• jenkins-ci subversion-plugin 1.33
• jenkins-ci subversion-plugin 1.34
• jenkins-ci subversion-plugin 1.35
• jenkins-ci subversion-plugin 1.36
• jenkins-ci subversion-plugin 1.37
• jenkins-ci subversion-plugin 1.38
• jenkins-ci subversion-plugin 1.39
• jenkins-ci subversion-plugin 1.40
• jenkins-ci subversion-plugin 1.41
• jenkins-ci subversion-plugin 1.42
• jenkins-ci subversion-plugin 1.43
• jenkins-ci subversion-plugin 1.44
• jenkins-ci subversion-plugin 1.45
• jenkins-ci subversion-plugin 1.46
• jenkins-ci subversion-plugin 1.47
• jenkins-ci subversion-plugin 1.48
• jenkins-ci subversion-plugin 1.49
• jenkins-ci subversion-plugin 1.50
• jenkins-ci subversion-plugin 1.51
• jenkins-ci subversion-plugin 1.52
Related
Weakness · not in database (1)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1032391 bugzilla.redhat.com
- https://github.com/jenkinsci/subversion-plugin/commit/7d4562d6f7e40de04bbe29577b51c79f07d05ba6 Exploit, Patch
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1032391 bugzilla.redhat.com
- https://github.com/jenkinsci/subversion-plugin/commit/7d4562d6f7e40de04bbe29577b51c79f07d05ba6 Exploit, Patch
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20 Vendor Advisory