CVE:CVE-2013-0158
CNNVD:CNNVD-201302-558
CloudBees Jenkins 1.498之前版本，Jenkins LTS 1.480.2之前版本，以及Jenkins Enterprise 1.447.6.1之前的1.447.x版本和1.466.12.1之前的1.466.x版本中存在未明漏洞。在从设备已连接且匿名访问权限已启用的状态下，远程攻击者可通过未知向量利用该漏洞获取主站的加密密钥。
solution:Upgrade cloudbees jenkins to a higher version than 1.480.3.1,1.466.1.2,1.466.2.1,1.400,1.424,1.447,1.447.1.1,1.447.2.2,1.447.3.1,and avoid the version (,1.480.3.1],1.466.1.2,1.466.2.1,1.400,1.424,1.447,1.447.1.1,1.447.2.2,1.447.3.1; Upgrade jenkins jenkins to a higher version than 1.400,1.401,1.402,1.403,1.404,1.405,1.406,1.407,1.408,1.409,1.410,1.411,1.412,1.413,1.414,1.415,1.416,1.417,1.418,1.419,1.420,1.421,1.422,1.423,1.424,1.425,1.426,1.427,1.428,1.429,1.430,1.431,1.432,1.433,1.434,1.435,1.436,1.437,1.466.2,1.409.1,1.409.2,1.409.3,1.424.1,1.424.2,1.424.3,1.424.4,1.424.5,1.424.6,1.447.1,1.447.2,1.466.1,and avoid the version 1.400,1.401,1.402,1.403,1.404,1.405,1.406,1.407,1.408,1.409,1.410,1.411,1.412,1.413,1.414,1.415,1.416,1.417,1.418,1.419,1.420,1.421,1.422,1.423,1.424,1.425,1.426,1.427,1.428,1.429,1.430,1.431,1.432,1.433,1.434,1.435,1.436,1.437,(,1.466.2],1.409.1,1.409.2,1.409.3,1.424.1,1.424.2,1.424.3,1.424.4,1.424.5,1.424.6,1.447.1,1.447.2,1.466.1