Security Advisory

CVE-2015-5325

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-11-25 20:00:00
Last updated 2024-08-06 06:41:09
Assigner redhat
State PUBLISHED

Description

Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by leveraging a JNLP slave. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3665.