What is the CVSS score of CVE-2013-0158?

CVE-2013-0158 has a CVSS 2.0 base score of 2.6 (Low). CVSS vector: AV:N/AC:H/Au:N/C:P/I:N/A:N. EPSS exploitation probability: 0.7%.

Is there a patch available for CVE-2013-0158?

Yes, a patch is available for CVE-2013-0158. Update the affected software to the latest version immediately.

Cloudbees CVE-2013-0158

LOW

2013-02-24 secalert@redhat.com

Information Disclosure Jenkins Cloudbees

2.6

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

2.6 LOW

AV:N/AC:H/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Feb 24, 2013 - 22:55 cve.org

LOW 2.6

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

10 maven packages depend on org.jenkins-ci.main:jenkins-core (9 direct, 1 indirect)

Ecosystem-wide dependent count for version 1.481.

DescriptionCVE.org

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown vectors.

AnalysisAI

Technical ContextAI

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.