Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-gmne-mnta-7khy

Summary

Jenkins allows Unauthorized Viewing of Queue API Information
Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.

Aliases

alias	CVE-2015-5324

alias	GHSA-5xmf-9vgr-53mj

Fixed_packages

url	pkg:maven/org.jenkins-ci.main/jenkins-core@1.625.2
purl	pkg:maven/org.jenkins-ci.main/jenkins-core@1.625.2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@1.625.2

url	pkg:maven/org.jenkins-ci.main/jenkins-core@1.638
purl	pkg:maven/org.jenkins-ci.main/jenkins-core@1.638
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@1.638

Affected_packages

References

reference_url	https://access.redhat.com/errata/RHSA-2016:0070
reference_id
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2016:0070

reference_url	https://github.com/jenkinsci/jenkins
reference_id
reference_type
scores
url	https://github.com/jenkinsci/jenkins

reference_url	https://github.com/jenkinsci/jenkins/commit/33b55588a6a5f844a59f2cd8940d385c6d412eb5
reference_id
reference_type
scores
url	https://github.com/jenkinsci/jenkins/commit/33b55588a6a5f844a59f2cd8940d385c6d412eb5

reference_url	https://github.com/jenkinsci/jenkins/commit/4a72e938d58598cd4bd3caa48ee9e8a3f60c30e4
reference_id
reference_type
scores
url	https://github.com/jenkinsci/jenkins/commit/4a72e938d58598cd4bd3caa48ee9e8a3f60c30e4

reference_url	https://github.com/jenkinsci/jenkins/commit/581eb9ceb354b8a55c010d0547ff73cb6fd67a75
reference_id
reference_type
scores
url	https://github.com/jenkinsci/jenkins/commit/581eb9ceb354b8a55c010d0547ff73cb6fd67a75

reference_url	https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
reference_id
reference_type
scores
url	https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2015-5324
reference_id	CVE-2015-5324
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2015-5324

reference_url	https://github.com/advisories/GHSA-5xmf-9vgr-53mj
reference_id	GHSA-5xmf-9vgr-53mj
reference_type
scores
url	https://github.com/advisories/GHSA-5xmf-9vgr-53mj

Weaknesses

cwe_id	200
name	Exposure of Sensitive Information to an Unauthorized Actor
description	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gmne-mnta-7khy

Vulnerability Instance