CVE-2015-5317

7.5

HIGHCVSS v3

Published

November 25, 2015

CVSS v2

5 MEDIUM

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

jenkinsci/jenkins

GitHubJenkins automation server

= *, <= 1.625.1, <= 1.637NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

= *, <= 1.625.1, <= 1.637NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

= *, <= 1.625.1, <= 1.637NVD

jenkins

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

= *, <= 1.625.1, <= 1.637NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

= *, <= 1.625.1, <= 1.637NVD

Security Advisories

CVE-2015-5317

Description

More on this CVE