CVE-2018-1999045

MEDIUM · CVSS 5.4 EPSS 0.87%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-08-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-1999045

Severity

MEDIUM

CVSS

5.4

EPSS

0.87%

Jenkins Java

Original NVD Description

A improper authentication vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in SecurityRealm.java, TokenBasedRememberMeServices2.java that allows attackers with a valid cookie to remain logged in even if that feature is disabled.