CVE-2015-5324 in Jenkins

摘要 (英语)

CloudBees Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.

Be aware that VulDB is the high quality source for vulnerability data.

预定

2015-07-01

披露

2015-11-25

状态

已确认

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
79325	CloudBees Jenkins api 权限提升	264	未定义	官方修复	CVE-2015-5324

来源

• MITRE
• NVD
• CVE Details