CVE-2015-7538

Published: Feb 3, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.

Products: Jenkins: Jenkins · Redhat: Openshift

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jenkins Jenkins	Up to 1.625.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Jenkins Jenkins	Up to 1.639

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Openshift	Up to 3.1
Redhat Openshift	Version 2.0

Source: secalert@redhat.com

Source: secalert@redhat.com

Source: secalert@redhat.com

Vendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Source: af854a3a-2127-422b-91ae-364da2661108

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

No history available yet.