Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2015-5325

Опубликовано: 11 нояб. 2015
Источник: redhat
CVSS2: 4.9
EPSS Низкий

Описание

Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by leveraging a JNLP slave. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3665.

Ссылки на источники

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1282368jenkins: JNLP slaves not subject to slave-to-master access control (SECURITY-206)

EPSS

Процентиль: 32%
0.00127
Низкий

4.9 Medium

CVSS2

Связанные уязвимости

ubuntu логотип

CVE-2015-5325

ubuntu
около 10 лет назад

Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by leveraging a JNLP slave. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3665.

nvd логотип

CVE-2015-5325

nvd
около 10 лет назад

Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by leveraging a JNLP slave. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3665.

debian логотип

CVE-2015-5325

debian
около 10 лет назад

Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass ...

github логотип

GHSA-x2q2-8pwq-fr5r

github
больше 3 лет назад

Jenkins allows Bypass of Access Restrictions

EPSS

Процентиль: 32%
0.00127
Низкий

4.9 Medium

CVSS2