CVEvulnerability

CVE-2015-5322

5.0 MEDIUM Published 2015-11-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-11-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-22

Description

Directory traversal vulnerability in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directory contents and read arbitrary files in the Jenkins servlet resources via directory traversal sequences in a request to jnlpJars/.

Affected configurations

• redhat openshift (<= 3.1) • redhat openshift 2.0 • jenkins jenkins (<= 1.637) • jenkins jenkins (<= 1.625.1)

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References