Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2015-5320 — MEDIUM severity vulnerability | Release Alert

CVE-2015-5320

5

MEDIUMCVSS v2

Published

November 25, 2015

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Jenkins before 1.638 and LTS before 1.625.2 do not properly verify the shared secret used in JNLP slave connections, which allows remote attackers to connect as slaves and obtain sensitive information or possibly gain administrative access by leveraging knowledge of the name of a slave.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.637, <= 1.625.1NVD

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.637, <= 1.625.1NVD

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.637, <= 1.625.1NVD

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

<= 1.637, <= 1.625.1NVD

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.637, <= 1.625.1NVD