CVE-2015-5320

medium

Published 2015-11-25 · Modified 2025-03-13

CVSS v3

—

CVSS v2

5.0

VIR risk

5.0

Description

Jenkins allows Exposure of Sensitive Information to an Unauthorized Actor

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11

Ecosystem	Package	Vulnerable	Fixed
Maven	org.jenkins-ci.main:jenkins-core	`>=1.626,<1.638`	`1.638`
Maven	org.jenkins-ci.main:jenkins-core	`<1.625.2`	`1.625.2`

Vendor	Product	Versions
redhat	openshift	`{"endIncluding":"3.1"}`
jenkins	jenkins	`{"endIncluding":"1.637"}`
redhat	openshift	`2.0`

CWE-200

Verify integrity in audit chain (admin only). AS-IS.