CVE-2015-5322: Path Traversal
Directory traversal vulnerability in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directory contents and read arbitrary files in the Jenkins servlet resources via directory traversal sequences in a request to jnlpJars/.
Other sources
The following flaw was found in Jenkins:
Access to the /jnlpJars/ URL was not limited to the specific JAR files users needed to access, allowing browsing directories and downloading other files in the Jenkins servlet resources, such as web.xml.
The information gained is very limited, and it requires a specific setup to gain any non-public information this way.
External References:
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5322?
CVE-2015-5322 has a medium severity rating as it allows directory traversal which can lead to unauthorized access to sensitive files.
How do I fix CVE-2015-5322?
To remediate CVE-2015-5322, upgrade Jenkins to version 1.638 or later, or to version 1.625.2 for LTS.
What kind of attacks can be performed using CVE-2015-5322?
Exploiting CVE-2015-5322 can allow attackers to list directory contents and read arbitrary files from the Jenkins server.
Which versions of Jenkins are affected by CVE-2015-5322?
Versions of Jenkins before 1.638 and LTS versions before 1.625.2 are vulnerable to CVE-2015-5322.
What components of Jenkins are impacted by CVE-2015-5322?
CVE-2015-5322 affects the Jenkins servlet resources accessed via the jnlpJars endpoint.