CVE-2012-6073

Published: Feb 24, 2013Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected (68)

Products: Cloudbees: Jenkins · Jenkins: Jenkins

Cloudbees

1 product

Jenkins

1 product

Jenkins

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cloudbees Jenkins	Version 1.447.1.1
Cloudbees Jenkins	Version 1.447.2.2
Cloudbees Jenkins	Version 1.447.3.1

Configuration B

16 vulnerable

Vulnerable Software	Affected Versions
Cloudbees Jenkins	Version 1.400
Cloudbees Jenkins	Version 1.424
Cloudbees Jenkins	Version 1.447
Jenkins Jenkins	Up to 1.466.2
Jenkins Jenkins	Version 1.409.1
Jenkins Jenkins	Version 1.409.2
Jenkins Jenkins	Version 1.409.3
Jenkins Jenkins	Version 1.424.1
Jenkins Jenkins	Version 1.424.2
Jenkins Jenkins	Version 1.424.3
Jenkins Jenkins	Version 1.424.4
Jenkins Jenkins	Version 1.424.5
Jenkins Jenkins	Version 1.424.6
Jenkins Jenkins	Version 1.447.1
Jenkins Jenkins	Version 1.447.2
Jenkins Jenkins	Version 1.466.1

Configuration C

8 vulnerable

Vulnerable Software	Affected Versions
Cloudbees Jenkins	Version 1.424.0.2
Cloudbees Jenkins	Version 1.424.0.4
Cloudbees Jenkins	Version 1.424.1.1
Cloudbees Jenkins	Version 1.424.2.1
Cloudbees Jenkins	Version 1.424.4.1
Cloudbees Jenkins	Version 1.424.5.1
Cloudbees Jenkins	Version 1.424.6.11
Cloudbees Jenkins	Version 1.424.6.1

Configuration D

39 vulnerable

Vulnerable Software	Affected Versions
Cloudbees Jenkins	Up to 1.480.3.1
Jenkins Jenkins	Version 1.400
Jenkins Jenkins	Version 1.401
Jenkins Jenkins	Version 1.402
Jenkins Jenkins	Version 1.403
Jenkins Jenkins	Version 1.404
Jenkins Jenkins	Version 1.405
Jenkins Jenkins	Version 1.406
Jenkins Jenkins	Version 1.407
Jenkins Jenkins	Version 1.408
Jenkins Jenkins	Version 1.409
Jenkins Jenkins	Version 1.410
Jenkins Jenkins	Version 1.411
Jenkins Jenkins	Version 1.412
Jenkins Jenkins	Version 1.413
Jenkins Jenkins	Version 1.414
Jenkins Jenkins	Version 1.415
Jenkins Jenkins	Version 1.416
Jenkins Jenkins	Version 1.417
Jenkins Jenkins	Version 1.418
Jenkins Jenkins	Version 1.419
Jenkins Jenkins	Version 1.420
Jenkins Jenkins	Version 1.421
Jenkins Jenkins	Version 1.422
Jenkins Jenkins	Version 1.423
Jenkins Jenkins	Version 1.424
Jenkins Jenkins	Version 1.425
Jenkins Jenkins	Version 1.426
Jenkins Jenkins	Version 1.427
Jenkins Jenkins	Version 1.428
Jenkins Jenkins	Version 1.429
Jenkins Jenkins	Version 1.430
Jenkins Jenkins	Version 1.431
Jenkins Jenkins	Version 1.432
Jenkins Jenkins	Version 1.433
Jenkins Jenkins	Version 1.434
Jenkins Jenkins	Version 1.435
Jenkins Jenkins	Version 1.436
Jenkins Jenkins	Version 1.437