CRLF injection vulnerability in the CLI command documentation in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Jenkins 2016 02 24 | — | Upgrade Jenkins to version 1.650Upgrade Jenkins LTS to version 1.642.2Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to the latest version | Nov 13, 2017 | Apr 7, 2016 |
| Redhat Openshift | — | Upgrade openshift-origin-cartridge-jbosseapUpgrade ImageMagickUpgrade rhcUpgrade openshift-origin-cartridge-cronUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade jenkins-plugin-durable-taskUpgrade jenkinsUpgrade openshift-origin-cartridge-haproxyUpgrade rubygem-openshift-origin-nodeUpgrade openshift-origin-cartridge-mysqlUpgrade libcgroupUpgrade openshift-origin-msg-node-mcollectiveUpgrade openshift-origin-cartridge-diyUpgrade jenkins-plugin-credentialsUpgrade openshift-origin-cartridge-pythonUpgrade jenkins-plugin-kubernetesUpgrade openshift-origin-cartridge-rubyUpgrade rubygem-openshift-origin-frontend-haproxy-sni-proxyUpgrade openshift-origin-cartridge-jbossewsUpgrade jenkins-plugin-openshift-pipelineUpgrade openshift-origin-cartridge-mongodbUpgrade rubygem-openshift-origin-admin-consoleUpgrade openshift-origin-cartridge-nodejsUpgrade openshift-origin-cartridge-phpUpgrade rubygem-openshift-origin-routing-daemonUpgrade openshift-origin-cartridge-jenkinsUpgrade rubygem-openshift-origin-controllerUpgrade activemqUpgrade openshift-origin-cartridge-perlUpgrade openshift-origin-brokerUpgrade openshift-origin-cartridge-jenkins-clientUpgrade openshift-origin-node-utilUpgrade openshift-origin-node-proxyUpgrade openshift-origin-broker-util | Jun 18, 2018 | Feb 24, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub