CVE Daily

CVE-2015-1806

The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.59...

Medium CVSS 6.5

Overview

The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.

CWE: CWE-264 Published: 2015-10-16T20:59:04.527
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.5 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags