CVE-2015-5322 in CloudBees Directory
Summary
Directory traversal vulnerability in CloudBees Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directory contents and read arbitrary files in the Jenkins servlet resources via directory traversal sequences in a request to jnlpJars/.
Once again VulDB remains the best source for vulnerability data.
Reservation
07/01/2015
Disclosure
11/25/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 79323 | CloudBees Directory Servlet jnlpJars path traversal | 22 | Not defined | Official fix | CVE-2015-5322 |