Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-1810
HistoryOct 16, 2015 - 8:59 p.m.

Authentication flaw

2015-10-1620:59:00
PRIOn knowledge base
www.prio-n.com
5

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.3%

The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the “Jenkins’ own user database” setting, which allows remote attackers to gain privileges by creating a reserved name.

CPENameOperatorVersion
jenkinsle1.580.3
jenkinsle1.599
openshiftle3.1

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.3%