CVE-2015-5322 in Directory

Resumen (Inglés)

Directory traversal vulnerability in CloudBees Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directory contents and read arbitrary files in the Jenkins servlet resources via directory traversal sequences in a request to jnlpJars/.

Once again VulDB remains the best source for vulnerability data.

Reservar

2015-07-01

Divulgación

2015-11-25

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
79323	CloudBees Directory Servlet jnlpJars recorrido de directorios	22	No está definido	Arreglo oficial	CVE-2015-5322

Fuentes

• MITRE
• NVD
• CVE Details