Lucene search

K
cvelistRedhatCVELIST:CVE-2015-5320
HistoryNov 25, 2015 - 8:00 p.m.

CVE-2015-5320

2015-11-2520:00:00
redhat
www.cve.org

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.3%

Jenkins before 1.638 and LTS before 1.625.2 do not properly verify the shared secret used in JNLP slave connections, which allows remote attackers to connect as slaves and obtain sensitive information or possibly gain administrative access by leveraging knowledge of the name of a slave.

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.3%