CVE-2015-1806

6.5

MEDIUMCVSS v2

Published

October 16, 2015

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.580.3, <= 1.599NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.580.3, <= 1.599NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.580.3, <= 1.599NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.580.3, <= 1.599NVD

Security Advisories

CVE-2015-1806

Description

More on this CVE