CVE-2015-5317

Jenkins User Interface (UI) Information Disclosure Vulnerability

Jenkins

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

25. Nov 2015

Ausgewertete Quellen

• Red Hat
  http://rhn.redhat.com/errata/RHSA-2016-0489.html
• Red Hat
  https://access.redhat.com/errata/RHSA-2016:0070
• Hersteller
  https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5317
• CISA
  Jenkins User Interface (UI) Information Disclosure Vulnerability
• NVD
  CVE-2015-5317