Jenkins Improper Authentication Vulnerability - CVE-2014-2062 - Vulnerability Database

Jenkins Improper Authentication Vulnerability - CVE-2014-2062

Medium

Reference: CVE-2014-2062

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-2062

Title: Jenkins Improper Authentication Vulnerability

Overview:

Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted which allows remote authenticated users to retain access via the token.