CVE-2014-2066

Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the…

published October 17, 2014

CVSS
—
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02061 · 81.1th percentile
Published
2014-10-17T15:00Z
EPSS history
Timeline
  • 17 OCT 15:00Z
    Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the…
    cvelistv5