Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-06-02. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
🚨 HIGH: CVE-2015-5317 (CVSS 7.5) affects Jenkins <1.638 & LTS <1.625.2. Remote attackers can obtain sensitive job/build names via Fingerprints pages. Patch immediately if running legacy versions. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/uTyIf7YPsT
Post summary
The tweet highlights CVE‑2015‑5317 as a high‑severity flaw in older Jenkins releases and urges users to apply available patches immediately.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jenkins | jenkins | - | - | - |
| App | jenkins | jenkins | - | - | - |
| App | redhat | openshift | - | - | - |
| App | redhat | openshift | 2.0 | - | - |