CVE-2016-3726

5.8

MEDIUMCVSS v2

Published

May 17, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.651.1, <= 2.2NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.651.1, <= 2.2NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.651.1, <= 2.2NVD

jenkins

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

<= 1.651.1, <= 2.2NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.651.1, <= 2.2NVD

Security Advisories

CVE-2016-3726

Description

More on this CVE