Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-6072
HistoryFeb 24, 2013 - 12:00 a.m.

CVE-2012-6072

2013-02-2400:00:00
ubuntu.com
ubuntu.com
15

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.9%

CRLF injection vulnerability in Jenkins before 1.491, Jenkins LTS before
1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before
1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to inject
arbitrary HTTP headers and conduct HTTP response splitting attacks via
unspecified vectors.

Bugs

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

61.9%