CVE-2015-1810 in Jenkins
Summary
The HudsonPrivateSecurityRealm class in CloudBees Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
02/17/2015
Disclosure
10/16/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 78505 | CloudBees Jenkins HudsonPrivateSecurityRealm access control | 264 | Not defined | Official fix | CVE-2015-1810 |