NetSight
high8.8

CVE-2015-7538

Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.

Impact

Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.

Affected products

VendorProductAffected versions
JenkinsJenkins
through 1.625.1
through 1.639
RedhatOpenshift
through 3.1
Version 2.0

References