Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remote authenticated users to retain access via the token.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: debian
Published: 2014-10-17T15:00:00
Updated: 2024-08-06T09:58:16.312Z
Reserved: 2014-02-19T00:00:00
Link: CVE-2014-2062
Vulnrichment
No data.
NVD
Status : Modified
Published: 2014-10-17T15:55:05.650
Modified: 2024-11-21T02:05:34.120
Link: CVE-2014-2062
Redhat