CVE-2015-5320

Jenkins before 1.638 and LTS before 1.625.2 do not properly verify the shared secret used in JNLP slave connections, which allows remote attackers to connect…

published November 25, 2015

CVSS
—
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

Jenkins before 1.638 and LTS before 1.625.2 do not properly verify the shared secret used in JNLP slave connections, which allows remote attackers to connect as slaves and obtain sensitive information or possibly gain administrative access by leveraging knowledge of the name of a slave.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02122 · 81.6th percentile
Published
2015-11-25T20:00Z
EPSS history
Timeline
  • 25 NOV 20:00Z
    Jenkins before 1.638 and LTS before 1.625.2 do not properly verify the shared secret used in JNLP slave connections, which allows remote attackers to connect…
    cvelistv5