Lucene search

K
cve[email protected]CVE-2015-1808
HistoryOct 16, 2015 - 8:59 p.m.

CVE-2015-1808

2015-10-1620:59:07
CWE-20
web.nvd.nist.gov
24
jenkins
cve-2015-1808
denial of service
update center
security vulnerability

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.5%

Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plug-in and tool installation) via crafted update center data.

Affected configurations

NVD
Node
jenkinsjenkinsRange1.580.3lts
Node
jenkinsjenkinsRange1.599
Node
redhatopenshiftRange3.1enterprise
CPENameOperatorVersion
jenkins:jenkinsjenkinsle1.580.3

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.5%