NetSight
IP …
medium6.8

CVE-2015-5318

Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to b…

Impact

Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack.

Affected products

VendorProductAffected versions
JenkinsJenkins
through 1.637
through 1.625.1
RedhatOpenshift
through 3.1
Version 2.0

Weakness classification

CWE-352

References