Lucene search

K
nvd[email protected]NVD:CVE-2015-5322
HistoryNov 25, 2015 - 8:59 p.m.

CVE-2015-5322

2015-11-2520:59:13
CWE-22
web.nvd.nist.gov
2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.1%

Directory traversal vulnerability in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directory contents and read arbitrary files in the Jenkins servlet resources via directory traversal sequences in a request to jnlpJars/.

Affected configurations

NVD
Node
redhatopenshiftRange3.1enterprise
Node
redhatopenshiftMatch2.0
Node
jenkinsjenkinsRange1.637
Node
jenkinsjenkinsRange1.625.1lts

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.1%