CVE-2015-1807

Jenkins < 1.600 and LTS < 1.596.1 - Authenticated Path Traversal via Symlink

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with certain permissions to read arbitrary files via a symlink, related to building artifacts.

References (4)

Core 4
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1205622
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2016:0070
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-1844.html

Scores

EPSS 0.0013
EPSS Percentile 31.7%

Details

CWE
CWE-22
Status published
Products (3)
jenkins/jenkins < 1.580.3
jenkins/jenkins < 1.599
redhat/openshift < 3.1
Published Oct 16, 2015
Tracked Since Feb 18, 2026