CVE-2015-5318

6.8

MEDIUMCVSS v2

Published

November 25, 2015

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.637, <= 1.625.1NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.637, <= 1.625.1NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.637, <= 1.625.1NVD

jenkins

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

<= 1.637, <= 1.625.1NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.637, <= 1.625.1NVD

Security Advisories

CVE-2015-5318

Description

More on this CVE