CVE-2015-5325

Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by leveraging a JNLP slave. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3665.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:openshift:*:*:*:*:enterprise:*:*:*

Configuration 2 (hide)

cpe:2.3:a:redhat:openshift:2.0:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*

Configuration 4 (hide)

cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*

Information

Published : 2015-11-25 12:59

Updated : 2019-12-17 09:41


NVD link : CVE-2015-5325

Mitre link : CVE-2015-5325


JSON object : View

CWE
CWE-284

Improper Access Control

Advertisement

dedicated server usa

Products Affected

redhat

  • openshift

jenkins

  • jenkins