{"action":"Upgrade org.jenkins-ci.main:jenkins-core to 1.480.2 (1.480.x) or 1.498 (1.498.x) or later.","affected":[{"fixed":"1.498","introduced":"1.481"},{"fixed":"1.480.2","introduced":"0"}],"component":"org.jenkins-ci.main:jenkins-core","cve_ids":["CVE-2013-0158"],"ecosystem":"Maven","epss":0.02455,"exploited":false,"fixed_versions":["1.498","1.480.2"],"ghsa_id":"GHSA-jwfr-h6jp-9p2g","id":"tcs_01M5N93SEJFZD4G38X1Q252J2W","modified_at":"2024-12-03T06:08:02.825011Z","published_at":"2022-05-05T02:48:30Z","references":["https://osv.dev/vulnerability/GHSA-jwfr-h6jp-9p2g","https://nvd.nist.gov/vuln/detail/CVE-2013-0158","https://github.com/jenkinsci/jenkins/commit/3dc13b957b14cec649036e8dd517f0f9cb21fb04","https://github.com/jenkinsci/jenkins/commit/4895eaafca468b7f0f1a3166b2fca7414f0d5da5","https://github.com/jenkinsci/jenkins/commit/48ecccc1669f325acf72953923f9d9620b2590e3","https://github.com/jenkinsci/jenkins/commit/56e4b6e287046e4ad2a02f8bd70225a86e74bd34","https://github.com/jenkinsci/jenkins/commit/7983ae3baea779df18862623d594744b8d285392","https://github.com/jenkinsci/jenkins/commit/94a8789b699132dd706021a6be1b78bc47f19602","https://github.com/jenkinsci/jenkins/commit/9fb6c2ca0c73b43cc2e6d08c09707ee67005e526","https://github.com/jenkinsci/jenkins/commit/a411b0c3b32eb314d5a26b64de1b3d5db2760443","https://github.com/jenkinsci/jenkins/commit/a9aff088f327278a8873aef47fa8f80d3c5932fd","https://github.com/jenkinsci/jenkins/commit/c3d8e05a1b3d58b6c4dcff97394cb3a79608b4b2","https://github.com/jenkinsci/jenkins/commit/e401c7cfe7b28b6ff9d0893e89c2568596b96915","https://bugzilla.redhat.com/show_bug.cgi?id=892795","https://github.com/jenkinsci/jenkins","https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-01-04","http://rhn.redhat.com/errata/RHSA-2013-0220.html","http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-01-04.cb","http://www.openwall.com/lists/oss-security/2013/01/07/4"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-jwfr-h6jp-9p2g","url":"https://osv.dev/vulnerability/GHSA-jwfr-h6jp-9p2g"}],"summary":"Jenkins allows attackers to obtain the master cryptographic key"}