CVE-2015-1814

The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API token change"…

published October 16, 2015

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API token change" involving anonymous users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02346 · 83.5th percentile
Published
2015-10-16T20:00Z
EPSS history
Timeline
  • 16 OCT 20:00Z
    The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API token change"…
    cvelistv5