What is GHSA-5xmf-9vgr-53mj?

GHSA-5xmf-9vgr-53mj is a security advisory published by GitHub Security Advisories with Medium severity. Jenkins allows Unauthorized Viewing of Queue API Information

Which CVE IDs does GHSA-5xmf-9vgr-53mj cover?

GHSA-5xmf-9vgr-53mj covers the following CVE IDs: CVE-2015-5324. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-5xmf-9vgr-53mj?

GHSA-5xmf-9vgr-53mj affects 2 products, including: maven/org.jenkins-ci.main:jenkins-core:\u003e= 1.626, \u003c 1.638; maven/org.jenkins-ci.main:jenkins-core:\u003c 1.625.2.

GHSA-5xmf-9vgr-53mjMedium

Jenkins allows Unauthorized Viewing of Queue API Information

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

March 13, 2025

🔗 CVE IDs covered (1)

CVE-2015-5324 →

📋 Description

Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.

🎯 Affected products2

maven/org.jenkins-ci.main:jenkins-core:>= 1.626, < 1.638
maven/org.jenkins-ci.main:jenkins-core:< 1.625.2

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2015-5324
https://access.redhat.com/errata/RHSA-2016:0070
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
http://rhn.redhat.com/errata/RHSA-2016-0489.html
https://github.com/jenkinsci/jenkins/commit/33b55588a6a5f844a59f2cd8940d385c6d412eb5
https://github.com/jenkinsci/jenkins/commit/4a72e938d58598cd4bd3caa48ee9e8a3f60c30e4
https://github.com/jenkinsci/jenkins/commit/581eb9ceb354b8a55c010d0547ff73cb6fd67a75
https://github.com/advisories/GHSA-5xmf-9vgr-53mj