CVE-2015-5323

MEDIUM · CVSS 6.5 EPSS 1.49%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-11-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2015-5323

Severity

MEDIUM

CVSS

6.5

EPSS

1.49%

Jenkins

Original NVD Description

Jenkins before 1.638 and LTS before 1.625.2 do not properly restrict access to API tokens which might allow remote administrators to gain privileges and run scripts by using an API token of another user.