CVE-2013-0158

Jenkins allows attackers to obtain the master cryptographic key

2.6 LowFix available

CVE-2013-0158 is a low vulnerability (CVSS 2.6) in Cloudbees Jenkins, published February 24, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.46%, the 84th percentile. Fixed in org.jenkins-ci.main:jenkins-core 1.498.

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown vectors.

Exploit likelihood

2.46%Up 0.3 points since Feb 4, 2022

What each source reports

NVD Score used 2.6

Record: CVE-2013-0158
CVSS 2.0: 2.6 LowAV:N/AC:H/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2013-0158
Updated: 2026-11-02

EUVDEUVD-2022-4445 No score

Record: EUVD-2022-4445
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jwfr-h6jp-9p2g No score

Jenkins allows attackers to obtain the master cryptographic key

Record: GHSA-jwfr-h6jp-9p2g
Updated: 2026-11-02

OSVGHSA-jwfr-h6jp-9p2g No score

Jenkins allows attackers to obtain the master cryptographic key

Record: GHSA-jwfr-h6jp-9p2g
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`org.jenkins-ci.main:jenkins-core` Maven	1.481 up to 1.498	1.498
`org.jenkins-ci.main:jenkins-core` Maven	before 1.480.2	1.480.2
`org.jenkins-ci.main:jenkins-core` Maven	1.481 up to 1.498, plus listed versions 1.4821.4831.4841.4851.486 Show 11 moreShow less 1.4871.4881.4891.4901.4911.4921.4931.4941.4951.4961.497	1.498
`org.jenkins-ci.main:jenkins-core` Maven	before 1.480.2, plus listed versions 1.3961.3971.3981.3991.400 Show 45 moreShow less 1.4011.4031.4041.4051.4061.4071.4081.4091.409.11.409.21.409.31.4101.4111.4121.4131.4141.4151.4161.4171.4181.4191.4201.4211.4221.4231.4241.424.11.424.21.424.31.424.41.424.51.424.61.4251.4261.4271.4281.4291.4301.4311.4321.4331.4341.4351.4361.437	1.480.2
`rhc` Red Hat:openshift:1::el6	before 0:1.3.2-1.3.el6op	0:1.3.2-1.3.el6op
`libmongodb` Red Hat:openshift:1::el6	before 0:2.0.2-6.el6op	0:2.0.2-6.el6op
`mongodb` Red Hat:openshift:1::el6	before 0:2.0.2-6.el6op	0:2.0.2-6.el6op
`mongodb-debuginfo` Red Hat:openshift:1::el6	before 0:2.0.2-6.el6op	0:2.0.2-6.el6op
`mongodb-devel` Red Hat:openshift:1::el6	before 0:2.0.2-6.el6op	0:2.0.2-6.el6op
`mongodb-server` Red Hat:openshift:1::el6	before 0:2.0.2-6.el6op	0:2.0.2-6.el6op

Show 28 moreShow less

Affected packages
Package	Affected	Fixed
`openshift-console` Red Hat:openshift:1::el6	before 0:0.0.13-2.el6op	0:0.0.13-2.el6op
`openshift-origin-broker` Red Hat:openshift:1::el6	before 0:1.0.10-1.el6op	0:1.0.10-1.el6op
`openshift-origin-broker-util` Red Hat:openshift:1::el6	before 0:1.0.14-1.el6op	0:1.0.14-1.el6op
`ruby193-mod_passenger` Red Hat:openshift:1::el6	before 0:3.0.12-21.el6op	0:3.0.12-21.el6op
`ruby193-rubygem-activerecord` Red Hat:openshift:1::el6	before 1:3.2.8-2.el6	1:3.2.8-2.el6
`ruby193-rubygem-activerecord-doc` Red Hat:openshift:1::el6	before 1:3.2.8-2.el6	1:3.2.8-2.el6
`ruby193-rubygem-passenger` Red Hat:openshift:1::el6	before 0:3.0.12-21.el6op	0:3.0.12-21.el6op
`ruby193-rubygem-passenger-debuginfo` Red Hat:openshift:1::el6	before 0:3.0.12-21.el6op	0:3.0.12-21.el6op
`ruby193-rubygem-passenger-devel` Red Hat:openshift:1::el6	before 0:3.0.12-21.el6op	0:3.0.12-21.el6op
`ruby193-rubygem-passenger-doc` Red Hat:openshift:1::el6	before 0:3.0.12-21.el6op	0:3.0.12-21.el6op
`ruby193-rubygem-passenger-native` Red Hat:openshift:1::el6	before 0:3.0.12-21.el6op	0:3.0.12-21.el6op
`ruby193-rubygem-passenger-native-libs` Red Hat:openshift:1::el6	before 0:3.0.12-21.el6op	0:3.0.12-21.el6op
`rubygem-activerecord` Red Hat:openshift:1::el6	before 1:3.0.13-3.el6op	1:3.0.13-3.el6op
`rubygem-openshift-origin-auth-remote-user` Red Hat:openshift:1::el6	before 0:1.0.4-2.el6op	0:1.0.4-2.el6op
`rubygem-openshift-origin-common` Red Hat:openshift:1::el6	before 0:1.0.2-1.el6op	0:1.0.2-1.el6op
`rubygem-openshift-origin-console` Red Hat:openshift:1::el6	before 0:1.0.6-1.el6op	0:1.0.6-1.el6op
`rubygem-openshift-origin-console-doc` Red Hat:openshift:1::el6	before 0:1.0.6-1.el6op	0:1.0.6-1.el6op
`rubygem-openshift-origin-controller` Red Hat:openshift:1::el6	before 0:1.0.11-1.el6op	0:1.0.11-1.el6op
`rubygem-openshift-origin-dns-bind` Red Hat:openshift:1::el6	before 0:1.0.2-1.el6op	0:1.0.2-1.el6op
`rubygem-openshift-origin-msg-broker-mcollective` Red Hat:openshift:1::el6	before 0:1.0.4-1.el6op	0:1.0.4-1.el6op
`jenkins` Red Hat:openshift:1::el6	before 0:1.498-1.1.el6op	0:1.498-1.1.el6op
`openshift-origin-cartridge-haproxy-1.4` Red Hat:openshift:1::el6	before 0:1.0.3-1.el6op	0:1.0.3-1.el6op
`openshift-origin-cartridge-ruby-1.8` Red Hat:openshift:1::el6	before 0:1.0.5-1.el6op	0:1.0.5-1.el6op
`openshift-origin-cartridge-ruby-1.9-scl` Red Hat:openshift:1::el6	before 0:1.0.5-1.el6op	0:1.0.5-1.el6op
`openshift-origin-msg-node-mcollective` Red Hat:openshift:1::el6	before 0:1.0.2-1.el6op	0:1.0.2-1.el6op
`openshift-origin-node-util` Red Hat:openshift:1::el6	before 0:1.0.7-1.el6op	0:1.0.7-1.el6op
`openshift-origin-port-proxy` Red Hat:openshift:1::el6	before 0:1.0.3-1.el6op	0:1.0.3-1.el6op
`rubygem-openshift-origin-node` Red Hat:openshift:1::el6	before 0:1.0.10-6.el6op	0:1.0.10-6.el6op

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 78 moreShow less

This page doesn't list everything

Left out here: 48 versions. The JSON record has them.