CVEvulnerability
CVE-2013-6373
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-11-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:P
- Weaknesses
- CWE-264
Description
The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.
Affected configurations
• jenkins-ci exclusion (<= 0.8)
• jenkins-ci exclusion 0.6
• jenkins-ci exclusion 0.7
Related
Weakness · not in database (1)
References
- https://wiki.jenkins-ci.org/display/JENKINS/Exclusion-Plugin wiki.jenkins-ci.org
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20 Vendor Advisory
- https://wiki.jenkins-ci.org/display/JENKINS/Exclusion-Plugin wiki.jenkins-ci.org
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20 Vendor Advisory