CVE-2013-6372
on github
Published
Severity
CVSS v3:
N/A
CVSS v2:
2.1 LOW
Description
The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.
References
Configurations
| CPE23 | Version Start | Version End | Exact Version |
|---|---|---|---|
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.27:*:*:*:*:*:*:* | n/a | n/a | 1.27 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.44:*:*:*:*:*:*:* | n/a | n/a | 1.44 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.18:*:*:*:*:*:*:* | n/a | n/a | 1.18 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.12:*:*:*:*:*:*:* | n/a | n/a | 1.12 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.39:*:*:*:*:*:*:* | n/a | n/a | 1.39 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.38:*:*:*:*:*:*:* | n/a | n/a | 1.38 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.24:*:*:*:*:*:*:* | n/a | n/a | 1.24 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.32:*:*:*:*:*:*:* | n/a | n/a | 1.32 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.1:*:*:*:*:*:*:* | n/a | n/a | 1.1 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.45:*:*:*:*:*:*:* | n/a | n/a | 1.45 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.29:*:*:*:*:*:*:* | n/a | n/a | 1.29 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.48:*:*:*:*:*:*:* | n/a | n/a | 1.48 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.46:*:*:*:*:*:*:* | n/a | n/a | 1.46 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.30:*:*:*:*:*:*:* | n/a | n/a | 1.30 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.23:*:*:*:*:*:*:* | n/a | n/a | 1.23 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.14:*:*:*:*:*:*:* | n/a | n/a | 1.14 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.41:*:*:*:*:*:*:* | n/a | n/a | 1.41 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.26:*:*:*:*:*:*:* | n/a | n/a | 1.26 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.11:*:*:*:*:*:*:* | n/a | n/a | 1.11 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.8:*:*:*:*:*:*:* | n/a | n/a | 1.8 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.50:*:*:*:*:*:*:* | n/a | n/a | 1.50 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.35:*:*:*:*:*:*:* | n/a | n/a | 1.35 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.19:*:*:*:*:*:*:* | n/a | n/a | 1.19 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.17:*:*:*:*:*:*:* | n/a | n/a | 1.17 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.16:*:*:*:*:*:*:* | n/a | n/a | 1.16 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.3:*:*:*:*:*:*:* | n/a | n/a | 1.3 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.0:*:*:*:*:*:*:* | n/a | n/a | 1.0 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.49:*:*:*:*:*:*:* | n/a | n/a | 1.49 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.47:*:*:*:*:*:*:* | n/a | n/a | 1.47 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.40:*:*:*:*:*:*:* | n/a | n/a | 1.40 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.31:*:*:*:*:*:*:* | n/a | n/a | 1.31 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.22:*:*:*:*:*:*:* | n/a | n/a | 1.22 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.20:*:*:*:*:*:*:* | n/a | n/a | 1.20 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.15:*:*:*:*:*:*:* | n/a | n/a | 1.15 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.13:*:*:*:*:*:*:* | n/a | n/a | 1.13 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.6:*:*:*:*:*:*:* | n/a | n/a | 1.6 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.4:*:*:*:*:*:*:* | n/a | n/a | 1.4 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.37:*:*:*:*:*:*:* | n/a | n/a | 1.37 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.21:*:*:*:*:*:*:* | n/a | n/a | 1.21 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.7:*:*:*:*:*:*:* | n/a | n/a | 1.7 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.5:*:*:*:*:*:*:* | n/a | n/a | 1.5 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.43:*:*:*:*:*:*:* | n/a | n/a | 1.43 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.42:*:*:*:*:*:*:* | n/a | n/a | 1.42 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.28:*:*:*:*:*:*:* | n/a | n/a | 1.28 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.25:*:*:*:*:*:*:* | n/a | n/a | 1.25 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.10:*:*:*:*:*:*:* | n/a | n/a | 1.10 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.9:*:*:*:*:*:*:* | n/a | n/a | 1.9 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:*:*:*:*:*:*:*:* | n/a | 1.53 (including) | * |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.52:*:*:*:*:*:*:* | n/a | n/a | 1.52 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.51:*:*:*:*:*:*:* | n/a | n/a | 1.51 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.36:*:*:*:*:*:*:* | n/a | n/a | 1.36 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.34:*:*:*:*:*:*:* | n/a | n/a | 1.34 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.33:*:*:*:*:*:*:* | n/a | n/a | 1.33 |
| cpe:2.3:a:jenkins-ci:subversion-plugin:1.2:*:*:*:*:*:*:* | n/a | n/a | 1.2 |