GitHub Advisoryadvisory · Maven

GHSA-37wm-28rm-56vw Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation

MEDIUM Published 2022-05-17 Modified 2025-03-13 Official page ↗
Aliases
CVE-2015-1810
Ecosystem
Maven
Packages
org.jenkins-ci.main:jenkins-core
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N
Weaknesses
CWE-287
Reviewed
2025-03-13

Affected packages

• Maven org.jenkins-ci.main:jenkins-core: >= 1.597, < 1.600 → fixed in 1.600 • Maven org.jenkins-ci.main:jenkins-core: < 1.596.1 → fixed in 1.596.1

Description

The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name.

Related

Alias · CVE (1)

  • CVE-2015-1810 The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using… vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References