CVE-2015-1810
No CVSS score yet. EPSS 1.6% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.main:jenkins-core 1.596.1, 1.600.
The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name.
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:jenkins
- redhat:openshift
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-37wm-28rm-56vw | Maven | org.jenkins-ci.main:jenkins-core | >=1.597 <1.600 | 1.600 |
| GHSA-37wm-28rm-56vw | Maven | org.jenkins-ci.main:jenkins-core | <1.596.1 | 1.596.1 |