CVE-2015-5321

5

MEDIUMCVSS v2

Published

November 25, 2015

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

The sidepanel widgets in the CLI command overview and help pages in Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to the pages.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.625.1, <= 1.637NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.625.1, <= 1.637NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.625.1, <= 1.637NVD

jenkins

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

<= 1.625.1, <= 1.637NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.625.1, <= 1.637NVD

Security Advisories

CVE-2015-5321

Description

More on this CVE