NetSight
IP …
medium5.0

CVE-2015-5324

Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.

Impact

Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.

Affected products

VendorProductAffected versions
JenkinsJenkins
through 1.625.1
through 1.637
RedhatOpenshift
through 3.1
Version 2.0

Weakness classification

CWE-264

References