Description

Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies.

Remediation

References

CVE-2014-2066

Related Vulnerabilities

WordPress 3.7.1 Multiple Vulnerabilities (3.7 - 3.7.1)

Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9515)

WordPress Plugin WP ULike Multiple Vulnerabilities (3.1)

MySQL CVE-2018-3251 Vulnerability (CVE-2018-3251)

MediaWiki Incorrect Authorization Vulnerability (CVE-2021-36132)

Severity

Medium

Classification

CVE-2014-2066 CWE-287

Tags

Missing Update Known Vulnerabilities