The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors.
Project Subscriptions
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2015-1931 | Jenkins allows for Privilege Escalation by Remote Authenticated Users |
Github GHSA |
GHSA-mm9c-4cv4-7rfv | Jenkins allows for Privilege Escalation by Remote Authenticated Users |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T04:54:16.280Z
Reserved: 2015-02-17T00:00:00
Link: CVE-2015-1806
No data.
Status : Deferred
Published: 2015-10-16T20:59:04.527
Modified: 2025-04-12T10:46:40.837
Link: CVE-2015-1806
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Github GHSA