CVE-2015-1814
published 2015-10-16CVE-2015-1814: The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API token change"…
PriorityP343high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.35%
81.8th percentile
The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API token change" involving anonymous users.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jenkins | jenkins | <= 1.605 | — |
| jenkins | jenkins | — | — |
| jenkins | jenkins_core | — | — |
| redhat | openshift | <= 3.1 | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Jenkins allows for Privilege Escalation by Remote Authenticated Users
osv·2022-05-17
CVE-2015-1814 [MEDIUM] Jenkins allows for Privilege Escalation by Remote Authenticated Users
Jenkins allows for Privilege Escalation by Remote Authenticated Users
The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API token change" involving anonymous users.
GHSA
Jenkins allows for Privilege Escalation by Remote Authenticated Users
ghsa·2022-05-17
CVE-2015-1814 [MEDIUM] CWE-266 Jenkins allows for Privilege Escalation by Remote Authenticated Users
Jenkins allows for Privilege Escalation by Remote Authenticated Users
The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API token change" involving anonymous users.
Jenkins
Jenkins Security Advisory 2015-03-23
vendor_jenkins·2015-03-23·CVSS 4.3
CVE-2015-1812 [MEDIUM] Jenkins Security Advisory 2015-03-23
Title: Jenkins Security Advisory 2015-03-23
Jenkins Security Advisory 2015-03-23
This advisory announces a security advisory in Jenkins core.
Description
SECURITY-171/CVE-2015-1812, SECURITY-177/CVE-2015-1813 (Reflective XSS vulnerability)
An attacker without any access to Jenkins can navigate the user to a carefully crafted URL and have the user execute unintended actions. This vulnerability can be used to attack Jenkins inside firewalls from outside so long as the location of Jenkins is known to the attacker.
SECURITY-180/CVE-2015-1814 (forced API token change)
The part of Jenkins that issues a new API token was not adequately protected against anonymous attackers. This allows an attacker to escalate privileges on Jenkins .
Severity
Red Hat
jenkins: forced API token change (SECURITY-180)
vendor_redhat·2015-03-23·CVSS 7.5
CVE-2015-1814 [HIGH] CWE-284 jenkins: forced API token change (SECURITY-180)
jenkins: forced API token change (SECURITY-180)
The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API token change" involving anonymous users.
A flaw was found in the Jenkins API token-issuing service. The service was not properly protected against anonymous users, potentially allowing remote attackers to escalate privileges.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2015-1806 CVE-2015-1807 CVE-2015-1813 CVE-2015-1812 CVE-2015-1811 CVE-2015-1810 CVE-2015-1808 CVE-2015-1809 CVE-2015-1814 jenkins: various flaws [fedora-all]
bugzilla·2015-03-25·CVSS 6.5
CVE-2015-1806 [MEDIUM] CVE-2015-1806 CVE-2015-1807 CVE-2015-1813 CVE-2015-1812 CVE-2015-1811 CVE-2015-1810 CVE-2015-1808 CVE-2015-1809 CVE-2015-1814 jenkins: various flaws [fedora-all]
CVE-2015-1806 CVE-2015-1807 CVE-2015-1813 CVE-2015-1812 CVE-2015-1811 CVE-2015-1810 CVE-2015-1808 CVE-2015-1809 CVE-2015-1814 jenkins: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and
Bugzilla
CVE-2015-1814 jenkins: forced API token change (SECURITY-180)
bugzilla·2015-03-25·CVSS 7.5
CVE-2015-1814 [HIGH] CVE-2015-1814 jenkins: forced API token change (SECURITY-180)
CVE-2015-1814 jenkins: forced API token change (SECURITY-180)
The part of Jenkins that issues a new API token was not adequately protected against anonymous attackers. This allows an attacker to escalate privileges on Jenkins
External References:
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-03-23
Discussion:
Created jenkins tracking bugs for this issue:
Affects: fedora-all [bug 1205637]
---
jenkins-1.590-3.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.
---
jenkins-1.606-1.fc22, jffi-1.2.7-5.fc22, jenkins-executable-war-1.29-4.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
---
This issue has
http://rhn.redhat.com/errata/RHSA-2015-1844.htmlhttps://access.redhat.com/errata/RHSA-2016:0070https://bugzilla.redhat.com/show_bug.cgi?id=1205616https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-03-23http://rhn.redhat.com/errata/RHSA-2015-1844.htmlhttps://access.redhat.com/errata/RHSA-2016:0070https://bugzilla.redhat.com/show_bug.cgi?id=1205616https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-03-23
2015-10-16
Published