CVE-2015-7538

6.8

MEDIUMCVSS v2

Published

February 3, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.

GitHubJenkins automation server

<= 1.625.1, <= 1.639NVD

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.625.1, <= 1.639NVD

NPM

Jenkins client

<= 1.625.1, <= 1.639NVD

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

<= 1.625.1, <= 1.639NVD

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.625.1, <= 1.639NVD