Description

Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.

Remediation

References

CVE-2015-5324

Related Vulnerabilities

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.28)

Oracle Database Server CVE-2011-0832 Vulnerability (CVE-2011-0832)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-16808)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-6658)

WordPress URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-14725)

Severity

Medium

Classification

CVE-2015-5324 CWE-264

Tags

Missing Update Known Vulnerabilities