CVE-2015-1806

EPSS 0.64%
Published 16.10.2015 20:59:04
Last modified 12.04.2025 10:46:40
Source secalert@redhat.com
Teams watchlist Login
Open Login

The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Jenkins ≫ Jenkins SwEditionlts Version <= 1.580.3

Jenkins ≫ Jenkins Version <= 1.599

Redhat ≫ Openshift SwEditionenterprise Version <= 3.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.64%	0.698

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

https://access.redhat.com/errata/RHSA-2016:0070

http://rhn.redhat.com/errata/RHSA-2015-1844.html

https://bugzilla.redhat.com/show_bug.cgi?id=1205620

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-02-27

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-1806

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-1806

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-1806

EUVD