CVE-2015-5323

6.5

MEDIUMCVSS v2

Published

November 25, 2015

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Jenkins before 1.638 and LTS before 1.625.2 do not properly restrict access to API tokens which might allow remote administrators to gain privileges and run scripts by using an API token of another user.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.625.1, <= 1.637NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.625.1, <= 1.637NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.625.1, <= 1.637NVD

jenkins

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

<= 1.625.1, <= 1.637NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.625.1, <= 1.637NVD

Security Advisories

CVE-2015-5323

Description

More on this CVE