CVE-2013-6373

Published: Nov 25, 2013Modified: Apr 29, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:P

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.

Affected (3)

Products: Jenkins Ci: Exclusion

Jenkins Ci

1 product

Exclusion

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Jenkins Ci Exclusion	Up to 0.8
Jenkins Ci Exclusion	Version 0.6
Jenkins Ci Exclusion	Version 0.7

Related CWEs

CWE-264

References (4)

https://wiki.jenkins-ci.org/display/JENKINS/Exclusion-Plugin

Source: secalert@redhat.com

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20

Source: secalert@redhat.com

Vendor Advisory

https://wiki.jenkins-ci.org/display/JENKINS/Exclusion-Plugin

Source: af854a3a-2127-422b-91ae-364da2661108

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.