CVE-2015-1808

2015-10-1620:59:07

CWE-20

redhat

web.nvd.nist.gov

jenkins

cve-2015-1808

denial of service

update center

security vulnerability

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

AI Score

Confidence

High

EPSS

0.005

Percentile

76.4%

JSON

Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plug-in and tool installation) via crafted update center data.

Affected configurations

Nvd

Node

jenkinsjenkinsRange≤1.580.3lts

Node

jenkinsjenkinsRange≤1.599

Node

redhatopenshiftRange≤3.1enterprise

VendorProductVersionCPE
jenkinsjenkins*cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*
jenkinsjenkins*cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*
redhatopenshift*cpe:2.3:a:redhat:openshift:*:*:*:*:enterprise:*:*:*

Vendor	Product	Version	CPE
jenkins	jenkins	*	cpe:2.3:a:jenkins:jenkins:::::lts:::*
jenkins	jenkins	*	cpe:2.3:a:jenkins:jenkins::::::::
redhat	openshift	*	cpe:2.3:a:redhat:openshift:::::enterprise:::*