CVE-2015-7539

7.6

HIGHCVSS v2

Published

February 3, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted plugin.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.639, <= 1.625.1NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.639, <= 1.625.1NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.639, <= 1.625.1NVD

jenkins

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

<= 1.639, <= 1.625.1NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.639, <= 1.625.1NVD

Security Advisories

CVE-2015-7539

Description

More on this CVE