Lucene search

K
nvd[email protected]NVD:CVE-2015-1807
HistoryOct 16, 2015 - 8:59 p.m.

CVE-2015-1807

2015-10-1620:59:06
CWE-22
web.nvd.nist.gov
3

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.3%

Directory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with certain permissions to read arbitrary files via a symlink, related to building artifacts.

Affected configurations

NVD
Node
jenkinsjenkinsRange1.580.3lts
Node
jenkinsjenkinsRange1.599
Node
redhatopenshiftRange3.1enterprise

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.3%