CVE-2015-5317

Known Exploited (CISA KEV)HIGH

7.5

CVSS Severity Score

EPSS Score42.6110%

EPSS Percentile95.38th

Published2015年11月25日

Last Modified2026年4月22日

Vulnerability Description

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

Affected Platforms (CPE)

📦

Jenkins

<= 1.637

📦

Jenkins

<= 1.625.1

📦

Redhat

Openshift

= 2.0

📦

Redhat

Openshift

<= 3.1

References & Advisories

🔗 http://rhn.redhat.com/errata/RHSA-2016-0489.html

🔗 https://access.redhat.com/errata/RHSA-2016:0070

🔗 https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11

🔗 http://rhn.redhat.com/errata/RHSA-2016-0489.html

🔗 https://access.redhat.com/errata/RHSA-2016:0070

🔗 https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5317

Vulnerability Description

Affected Platforms (CPE)

Jenkins

Jenkins

Openshift

Openshift

References & Advisories

相关漏洞威胁