CVE-2014-2062

Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remote authenticated users to retain access…

published October 17, 2014

CVSS
—
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remote authenticated users to retain access via the token.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01748 · 77.6th percentile
Published
2014-10-17T15:00Z
EPSS history
Timeline
  • 17 OCT 15:00Z
    Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remote authenticated users to retain access…
    cvelistv5