CVE-2015-7539

The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it…

published February 3, 2016

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted plugin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01397 · 72.2th percentile
Published
2016-02-03T15:00Z
EPSS history
Timeline
  • 03 FEB 15:00Z
    The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it…
    cvelistv5