CVE-2012-6072: CRLF Injection
CRLF injection vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Other sources
Jenkins Security Advisory 2012-11-20
The first vulnerability is commonly known as HTTP response splitting vulnerability, which can act as a cross-site scripting vulnerability. This allows an anonymous attacker to inject malicious HTMLs to pages served by Jenkins. This in turn allows an attacker to escalate his privileges by hijacking sessions of other users. To mount this attack, the attacker needs to know the exact URL of your Jenkins installation. This vulnerability affects those who run Jenkins on its built-in servlet container (this includes all the native packages.)
Fix: Main line users should upgrade to Jenkins 1.491 LTS users should upgrade to 1.480.1
External URLs: https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2012-11-20 http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-11-20.cb
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6072?
CVE-2012-6072 is classified as a medium severity vulnerability that allows remote attackers to inject arbitrary HTTP headers.
How do I fix CVE-2012-6072?
To fix CVE-2012-6072, update Jenkins to version 1.491 or higher, or apply the specific patches provided for affected versions.
What type of attacks can CVE-2012-6072 facilitate?
CVE-2012-6072 can facilitate HTTP response splitting attacks due to CRLF injection.
Which versions of Jenkins are affected by CVE-2012-6072?
CVE-2012-6072 affects Jenkins versions prior to 1.491, along with specific earlier versions of Jenkins LTS and enterprise builds.
Can CVE-2012-6072 impact security in web applications?
Yes, CVE-2012-6072 can severely impact web application security by allowing attackers to manipulate HTTP responses.