CVE-2015-5318

Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:redhat:openshift:*:*:*:*:enterprise:*:*:*

Configuration 3 (hide)

cpe:2.3:a:redhat:openshift:2.0:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*

Information

Published : 2015-11-25 12:59

Updated : 2019-12-17 09:41


NVD link : CVE-2015-5318

Mitre link : CVE-2015-5318


JSON object : View

CWE
CWE-352

Cross-Site Request Forgery (CSRF)

Advertisement

dedicated server usa

Products Affected

redhat

  • openshift

jenkins

  • jenkins