CVE-2015-5323

Jenkins before 1.638 and LTS before 1.625.2 do not properly restrict access to API tokens which might allow remote administrators to gain privileges and run…

published November 25, 2015

CVSS
—
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

Jenkins before 1.638 and LTS before 1.625.2 do not properly restrict access to API tokens which might allow remote administrators to gain privileges and run scripts by using an API token of another user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01491 · 73.9th percentile
Published
2015-11-25T20:00Z
EPSS history
Timeline
  • 25 NOV 20:00Z
    Jenkins before 1.638 and LTS before 1.625.2 do not properly restrict access to API tokens which might allow remote administrators to gain privileges and run…
    cvelistv5