Vulnerability in Jenkins-Ci Exclusion

CVE-2013-6373

The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.

EPSS: 0.011 (63.5th percentile) — read the EPSS interpretation.

Affected products

Jenkins-ci Exclusion — versions 0.6, 0.7
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secalert@redhat.com (x_refsource_MISC, Vendor Advisory)
secalert@redhat.com (x_refsource_CONFIRM)