GHSA-37wm-28rm-56vw

Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation

At a glance

Published: 2022-05-17 03:53 UTC
Updated: 2025-03-13 19:28 UTC
CVE: CVE-2015-1810
CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

Description

The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name.

Affected packages

Package	Versions
Maven · org.jenkins-ci.main:jenkins-core	introduced 1.597, fixed 1.600
Maven · org.jenkins-ci.main:jenkins-core	introduced 0, fixed 1.596.1

References

https://nvd.nist.gov/vuln/detail/CVE-2015-1810 ADVISORY
https://access.redhat.com/errata/RHSA-2016:0070 WEB
https://bugzilla.redhat.com/show_bug.cgi?id=1205627 WEB
https://github.com/jenkinsci/jenkins PACKAGE
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-02-27 WEB
http://rhn.redhat.com/errata/RHSA-2015-1844.html WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — GitHub Advisory Database