ZeroDay Findings
Sign inSign up

Findings

CVE-2015-5317

Jenkins User Interface (UI) Information Disclosure Vulnerability

Published Nov 25, 2015 · updated Jun 16, 2026 · jenkins jenkins

Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages.

Timeline

Detection, updates, and resolution for this record.

  1. Nov 25, 2015 · Catalog

    Detected

    Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages.

  2. May 12, 2023 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jun 2, 2023 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages.

Required action

Apply updates per vendor instructions.

CISA due date Jun 2, 2023

Affected

  • cpe jenkins/jenkinsversion unspecified
  • cpe redhat/openshiftversion unspecified
  • cpe redhat/openshift2.0
  • vendor Jenkins Jenkins User Interface (UI)version unspecified

Sources

  • CISA KEVCVE-2015-5317

    Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages.

    cisa.gov
  • CVE.orgCVE-2015-5317

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2015-5317

    30-day exploitation probability 23.0%

    first.org
  • NIST NVDCVE-2015-5317

    The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

    nvd.nist.gov

References