CVE Listesine Dön
CVE-2015-5317 CISA KEV · Aktif Sömürülüyor

jenkins: Project name disclosure via fingerprints (SECURITY-153)

CVSS Skor

5.0

EPSS İhtimal

%23.0

Risk Skoru

2.3

Yayın

11 yıl önce

Overview (Genel Bakış)Public Exploits (0)Newsroom (Haberler)Vulnerability Timeline
Resmî yama doğrulandı

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2015-5317 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2015-5317 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

IDVENDORPRODUCTACTION
1Red Hat6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.6.1-1.el6op.noarch İncele
2Red Hat6Server-RHOSE-CLIENT-2.2:rhc-0:1.38.6.1-1.el6op.src İncele
3Red Hat6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611454.el6op.src İncele
4Red Hat6Server-RHOSE-INFRA-2.2:activemq-0:5.9.0-6.redhat.611454.el6op.x86_64 İncele
5Red Hat6Server-RHOSE-INFRA-2.2:activemq-client-0:5.9.0-6.redhat.611454.el6op.x86_64 İncele
6Red Hat6Server-RHOSE-INFRA-2.2:openshift-enterprise-release-0:2.2.9-1.el6op.noarch İncele
7Red Hat6Server-RHOSE-INFRA-2.2:openshift-enterprise-upgrade-0:2.2.9-1.el6op.src İncele
8Red Hat6Server-RHOSE-INFRA-2.2:openshift-enterprise-upgrade-broker-0:2.2.9-1.el6op.noarch İncele
9Red Hat6Server-RHOSE-INFRA-2.2:openshift-enterprise-upgrade-node-0:2.2.9-1.el6op.noarch İncele
10Red Hat6Server-RHOSE-INFRA-2.2:openshift-enterprise-yum-validator-0:2.2.9-1.el6op.noarch İncele
11Red Hat6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.5.3-1.el6op.noarch İncele
12Red Hat6Server-RHOSE-INFRA-2.2:openshift-origin-broker-util-0:1.37.5.3-1.el6op.src İncele
13Red Hat6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-common-0:1.29.5.2-1.el6op.noarch İncele
14Red Hat6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-common-0:1.29.5.2-1.el6op.src İncele
15Red Hat6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-console-0:1.35.5.1-1.el6op.noarch İncele
16Red Hat6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-console-0:1.35.5.1-1.el6op.src İncele
17Red Hat6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.5.1-1.el6op.noarch İncele
18Red Hat6Server-RHOSE-INFRA-2.2:rubygem-openshift-origin-controller-0:1.38.5.1-1.el6op.src İncele
19Red Hat6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611454.el6op.src İncele
20Red Hat6Server-RHOSE-NODE-2.2:activemq-0:5.9.0-6.redhat.611454.el6op.x86_64 İncele
21Red Hat6Server-RHOSE-NODE-2.2:activemq-client-0:5.9.0-6.redhat.611454.el6op.x86_64 İncele
22Red Hat6Server-RHOSE-NODE-2.2:jenkins-0:1.625.3-1.el6op.noarch İncele
23Red Hat6Server-RHOSE-NODE-2.2:jenkins-0:1.625.3-1.el6op.src İncele
24Red Hat6Server-RHOSE-NODE-2.2:openshift-enterprise-release-0:2.2.9-1.el6op.noarch İncele
25Red Hat6Server-RHOSE-NODE-2.2:openshift-enterprise-upgrade-0:2.2.9-1.el6op.src İncele
26Red Hat6Server-RHOSE-NODE-2.2:openshift-enterprise-upgrade-broker-0:2.2.9-1.el6op.noarch İncele
27Red Hat6Server-RHOSE-NODE-2.2:openshift-enterprise-upgrade-node-0:2.2.9-1.el6op.noarch İncele
28Red Hat6Server-RHOSE-NODE-2.2:openshift-enterprise-yum-validator-0:2.2.9-1.el6op.noarch İncele
29Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.2.1-1.el6op.noarch İncele
30Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-cron-0:1.25.2.1-1.el6op.src İncele
31Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.5.1-1.el6op.noarch İncele
32Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-haproxy-0:1.31.5.1-1.el6op.src İncele
33Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.2.1-1.el6op.noarch İncele
34Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-mysql-0:1.31.2.1-1.el6op.src İncele
35Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.3.1-1.el6op.noarch İncele
36Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-php-0:1.35.3.1-1.el6op.src İncele
37Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.2.1-1.el6op.noarch İncele
38Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-cartridge-python-0:1.34.2.1-1.el6op.src İncele
39Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-msg-node-mcollective-0:1.30.2.1-1.el6op.noarch İncele
40Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.2.1-1.el6op.noarch İncele
41Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-node-proxy-0:1.26.2.1-1.el6op.src İncele
42Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.6.2-1.el6op.noarch İncele
43Red Hat6Server-RHOSE-NODE-2.2:openshift-origin-node-util-0:1.38.6.2-1.el6op.src İncele
44Red Hat6Server-RHOSE-NODE-2.2:php-0:5.3.3-46.el6_7.1.src İncele
45Red Hat6Server-RHOSE-NODE-2.2:php-bcmath-0:5.3.3-46.el6_7.1.x86_64 İncele
46Red Hat6Server-RHOSE-NODE-2.2:php-debuginfo-0:5.3.3-46.el6_7.1.x86_64 İncele
47Red Hat6Server-RHOSE-NODE-2.2:php-devel-0:5.3.3-46.el6_7.1.x86_64 İncele
48Red Hat6Server-RHOSE-NODE-2.2:php-fpm-0:5.3.3-46.el6_7.1.x86_64 İncele
49Red Hat6Server-RHOSE-NODE-2.2:php-imap-0:5.3.3-46.el6_7.1.x86_64 İncele
50Red Hat6Server-RHOSE-NODE-2.2:php-intl-0:5.3.3-46.el6_7.1.x86_64 İncele
51Red Hat6Server-RHOSE-NODE-2.2:php-mbstring-0:5.3.3-46.el6_7.1.x86_64 İncele
52Red Hat6Server-RHOSE-NODE-2.2:php-process-0:5.3.3-46.el6_7.1.x86_64 İncele
53Red Hat6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-common-0:1.29.5.2-1.el6op.noarch İncele
54Red Hat6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-common-0:1.29.5.2-1.el6op.src İncele
55Red Hat6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-frontend-apache-vhost-0:0.13.2.1-1.el6op.noarch İncele
56Red Hat6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.5.3-1.el6op.noarch İncele
57Red Hat6Server-RHOSE-NODE-2.2:rubygem-openshift-origin-node-0:1.38.5.3-1.el6op.src İncele
58Red Hat7Server-RH7-RHOSE-3.1:atomic-openshift-0:3.1.1.6-1.git.0.b57e8bd.el7aos.src İncele
59Red Hat7Server-RH7-RHOSE-3.1:atomic-openshift-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64 İncele
60Red Hat7Server-RH7-RHOSE-3.1:atomic-openshift-clients-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64 İncele
61Red Hat7Server-RH7-RHOSE-3.1:atomic-openshift-clients-redistributable-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64 İncele
62Red Hat7Server-RH7-RHOSE-3.1:atomic-openshift-dockerregistry-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64 İncele
63Red Hat7Server-RH7-RHOSE-3.1:atomic-openshift-master-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64 İncele
64Red Hat7Server-RH7-RHOSE-3.1:atomic-openshift-node-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64 İncele
65Red Hat7Server-RH7-RHOSE-3.1:atomic-openshift-pod-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64 İncele
66Red Hat7Server-RH7-RHOSE-3.1:atomic-openshift-recycle-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64 İncele
67Red Hat7Server-RH7-RHOSE-3.1:atomic-openshift-sdn-ovs-0:3.1.1.6-1.git.0.b57e8bd.el7aos.x86_64 İncele
68Red Hat7Server-RH7-RHOSE-3.1:atomic-openshift-utils-0:3.0.35-1.git.0.6a386dd.el7aos.noarch İncele
69Red Hat7Server-RH7-RHOSE-3.1:heapster-0:0.18.2-3.gitaf4752e.el7aos.src İncele
70Red Hat7Server-RH7-RHOSE-3.1:heapster-0:0.18.2-3.gitaf4752e.el7aos.x86_64 İncele
71Red Hat7Server-RH7-RHOSE-3.1:jenkins-0:1.625.3-2.el7aos.noarch İncele
72Red Hat7Server-RH7-RHOSE-3.1:jenkins-0:1.625.3-2.el7aos.src İncele
73Red Hat7Server-RH7-RHOSE-3.1:nodejs-align-text-0:0.1.3-2.el7aos.noarch İncele
74Red Hat7Server-RH7-RHOSE-3.1:nodejs-align-text-0:0.1.3-2.el7aos.src İncele
75Red Hat7Server-RH7-RHOSE-3.1:nodejs-ansi-green-0:0.1.1-1.el7aos.noarch İncele
76Red Hat7Server-RH7-RHOSE-3.1:nodejs-ansi-green-0:0.1.1-1.el7aos.src İncele
77Red Hat7Server-RH7-RHOSE-3.1:nodejs-ansi-wrap-0:0.1.0-1.el7aos.noarch İncele
78Red Hat7Server-RH7-RHOSE-3.1:nodejs-ansi-wrap-0:0.1.0-1.el7aos.src İncele
79Red Hat7Server-RH7-RHOSE-3.1:nodejs-anymatch-0:1.3.0-1.el7aos.noarch İncele
80Red Hat7Server-RH7-RHOSE-3.1:nodejs-anymatch-0:1.3.0-1.el7aos.src İncele
81Red Hat7Server-RH7-RHOSE-3.1:nodejs-arr-diff-0:2.0.0-1.el7aos.noarch İncele
82Red Hat7Server-RH7-RHOSE-3.1:nodejs-arr-diff-0:2.0.0-1.el7aos.src İncele
83Red Hat7Server-RH7-RHOSE-3.1:nodejs-arr-flatten-0:1.0.1-1.el7aos.noarch İncele
84Red Hat7Server-RH7-RHOSE-3.1:nodejs-arr-flatten-0:1.0.1-1.el7aos.src İncele
85Red Hat7Server-RH7-RHOSE-3.1:nodejs-array-unique-0:0.2.1-1.el7aos.noarch İncele
86Red Hat7Server-RH7-RHOSE-3.1:nodejs-array-unique-0:0.2.1-1.el7aos.src İncele
87Red Hat7Server-RH7-RHOSE-3.1:nodejs-arrify-0:1.0.0-1.el7aos.noarch İncele
88Red Hat7Server-RH7-RHOSE-3.1:nodejs-arrify-0:1.0.0-1.el7aos.src İncele
89Red Hat7Server-RH7-RHOSE-3.1:nodejs-async-each-0:1.0.0-1.el7aos.noarch İncele
90Red Hat7Server-RH7-RHOSE-3.1:nodejs-async-each-0:1.0.0-1.el7aos.src İncele
91Red Hat7Server-RH7-RHOSE-3.1:nodejs-binary-extensions-0:1.3.1-1.el7aos.noarch İncele
92Red Hat7Server-RH7-RHOSE-3.1:nodejs-binary-extensions-0:1.3.1-1.el7aos.src İncele
93Red Hat7Server-RH7-RHOSE-3.1:nodejs-braces-0:1.8.2-2.el7aos.noarch İncele
94Red Hat7Server-RH7-RHOSE-3.1:nodejs-braces-0:1.8.2-2.el7aos.src İncele
95Red Hat7Server-RH7-RHOSE-3.1:nodejs-capture-stack-trace-0:1.0.0-2.el7aos.noarch İncele
96Red Hat7Server-RH7-RHOSE-3.1:nodejs-capture-stack-trace-0:1.0.0-2.el7aos.src İncele
97Red Hat7Server-RH7-RHOSE-3.1:nodejs-chokidar-0:1.4.1-2.el7aos.noarch İncele
98Red Hat7Server-RH7-RHOSE-3.1:nodejs-chokidar-0:1.4.1-2.el7aos.src İncele
99Red Hat7Server-RH7-RHOSE-3.1:nodejs-configstore-0:1.4.0-1.el7aos.noarch İncele
100Red Hat7Server-RH7-RHOSE-3.1:nodejs-configstore-0:1.4.0-1.el7aos.src İncele
101Red Hat7Server-RH7-RHOSE-3.1:nodejs-create-error-class-0:2.0.1-2.el7aos.noarch İncele
102Red Hat7Server-RH7-RHOSE-3.1:nodejs-create-error-class-0:2.0.1-2.el7aos.src İncele
103Red Hat7Server-RH7-RHOSE-3.1:nodejs-deep-extend-0:0.3.2-2.el7aos.noarch İncele
104Red Hat7Server-RH7-RHOSE-3.1:nodejs-deep-extend-0:0.3.2-2.el7aos.src İncele
105Red Hat7Server-RH7-RHOSE-3.1:nodejs-duplexer-0:0.1.1-2.el7aos.noarch İncele
106Red Hat7Server-RH7-RHOSE-3.1:nodejs-duplexer-0:0.1.1-2.el7aos.src İncele
107Red Hat7Server-RH7-RHOSE-3.1:nodejs-duplexify-0:3.4.2-1.el7aos.noarch İncele
108Red Hat7Server-RH7-RHOSE-3.1:nodejs-duplexify-0:3.4.2-1.el7aos.src İncele
109Red Hat7Server-RH7-RHOSE-3.1:nodejs-end-of-stream-0:1.1.0-2.el7aos.noarch İncele
110Red Hat7Server-RH7-RHOSE-3.1:nodejs-end-of-stream-0:1.1.0-2.el7aos.src İncele
111Red Hat7Server-RH7-RHOSE-3.1:nodejs-error-ex-0:1.2.0-1.el7aos.noarch İncele
112Red Hat7Server-RH7-RHOSE-3.1:nodejs-error-ex-0:1.2.0-1.el7aos.src İncele
113Red Hat7Server-RH7-RHOSE-3.1:nodejs-es6-promise-0:3.0.2-2.el7aos.noarch İncele
114Red Hat7Server-RH7-RHOSE-3.1:nodejs-es6-promise-0:3.0.2-2.el7aos.src İncele
115Red Hat7Server-RH7-RHOSE-3.1:nodejs-event-stream-0:3.3.2-1.el7aos.noarch İncele
116Red Hat7Server-RH7-RHOSE-3.1:nodejs-event-stream-0:3.3.2-1.el7aos.src İncele
117Red Hat7Server-RH7-RHOSE-3.1:nodejs-expand-brackets-0:0.1.4-1.el7aos.noarch İncele
118Red Hat7Server-RH7-RHOSE-3.1:nodejs-expand-brackets-0:0.1.4-1.el7aos.src İncele
119Red Hat7Server-RH7-RHOSE-3.1:nodejs-expand-range-0:1.8.1-1.el7aos.noarch İncele
120Red Hat7Server-RH7-RHOSE-3.1:nodejs-expand-range-0:1.8.1-1.el7aos.src İncele
121Red Hat7Server-RH7-RHOSE-3.1:nodejs-extglob-0:0.3.1-1.el7aos.noarch İncele
122Red Hat7Server-RH7-RHOSE-3.1:nodejs-extglob-0:0.3.1-1.el7aos.src İncele
123Red Hat7Server-RH7-RHOSE-3.1:nodejs-filename-regex-0:2.0.0-1.el7aos.noarch İncele
124Red Hat7Server-RH7-RHOSE-3.1:nodejs-filename-regex-0:2.0.0-1.el7aos.src İncele
125Red Hat7Server-RH7-RHOSE-3.1:nodejs-fill-range-0:2.2.3-1.el7aos.noarch İncele
126Red Hat7Server-RH7-RHOSE-3.1:nodejs-fill-range-0:2.2.3-1.el7aos.src İncele
127Red Hat7Server-RH7-RHOSE-3.1:nodejs-for-in-0:0.1.4-1.el7aos.noarch İncele
128Red Hat7Server-RH7-RHOSE-3.1:nodejs-for-in-0:0.1.4-1.el7aos.src İncele
129Red Hat7Server-RH7-RHOSE-3.1:nodejs-for-own-0:0.1.3-1.el7aos.noarch İncele
130Red Hat7Server-RH7-RHOSE-3.1:nodejs-for-own-0:0.1.3-1.el7aos.src İncele
131Red Hat7Server-RH7-RHOSE-3.1:nodejs-from-0:0.1.3-2.el7aos.noarch İncele
132Red Hat7Server-RH7-RHOSE-3.1:nodejs-from-0:0.1.3-2.el7aos.src İncele
133Red Hat7Server-RH7-RHOSE-3.1:nodejs-glob-base-0:0.3.0-1.el7aos.noarch İncele
134Red Hat7Server-RH7-RHOSE-3.1:nodejs-glob-base-0:0.3.0-1.el7aos.src İncele
135Red Hat7Server-RH7-RHOSE-3.1:nodejs-glob-parent-0:2.0.0-1.el7aos.noarch İncele
136Red Hat7Server-RH7-RHOSE-3.1:nodejs-glob-parent-0:2.0.0-1.el7aos.src İncele
137Red Hat7Server-RH7-RHOSE-3.1:nodejs-got-0:5.2.1-1.el7aos.noarch İncele
138Red Hat7Server-RH7-RHOSE-3.1:nodejs-got-0:5.2.1-1.el7aos.src İncele
139Red Hat7Server-RH7-RHOSE-3.1:nodejs-graceful-fs-0:4.1.2-1.el7aos.noarch İncele
140Red Hat7Server-RH7-RHOSE-3.1:nodejs-graceful-fs-0:4.1.2-1.el7aos.src İncele
141Red Hat7Server-RH7-RHOSE-3.1:nodejs-ini-0:1.1.0-6.el7aos.noarch İncele
142Red Hat7Server-RH7-RHOSE-3.1:nodejs-ini-0:1.1.0-6.el7aos.src İncele
143Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-binary-path-0:1.0.1-1.el7aos.noarch İncele
144Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-binary-path-0:1.0.1-1.el7aos.src İncele
145Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-dotfile-0:1.0.2-1.el7aos.noarch İncele
146Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-dotfile-0:1.0.2-1.el7aos.src İncele
147Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-equal-shallow-0:0.1.3-1.el7aos.noarch İncele
148Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-equal-shallow-0:0.1.3-1.el7aos.src İncele
149Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-extendable-0:0.1.1-1.el7aos.noarch İncele
150Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-extendable-0:0.1.1-1.el7aos.src İncele
151Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-extglob-0:1.0.0-1.el7aos.noarch İncele
152Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-extglob-0:1.0.0-1.el7aos.src İncele
153Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-glob-0:2.0.1-1.el7aos.noarch İncele
154Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-glob-0:2.0.1-1.el7aos.src İncele
155Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-npm-0:1.0.0-1.el7aos.noarch İncele
156Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-npm-0:1.0.0-1.el7aos.src İncele
157Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-number-0:2.1.0-1.el7aos.noarch İncele
158Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-number-0:2.1.0-1.el7aos.src İncele
159Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-plain-obj-0:1.0.0-1.el7aos.noarch İncele
160Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-plain-obj-0:1.0.0-1.el7aos.src İncele
161Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-primitive-0:2.0.0-1.el7aos.noarch İncele
162Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-primitive-0:2.0.0-1.el7aos.src İncele
163Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-redirect-0:1.0.0-1.el7aos.noarch İncele
164Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-redirect-0:1.0.0-1.el7aos.src İncele
165Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-stream-0:1.0.1-2.el7aos.noarch İncele
166Red Hat7Server-RH7-RHOSE-3.1:nodejs-is-stream-0:1.0.1-2.el7aos.src İncele
167Red Hat7Server-RH7-RHOSE-3.1:nodejs-isobject-0:2.0.0-1.el7aos.noarch İncele
168Red Hat7Server-RH7-RHOSE-3.1:nodejs-isobject-0:2.0.0-1.el7aos.src İncele
169Red Hat7Server-RH7-RHOSE-3.1:nodejs-kind-of-0:3.0.2-1.el7aos.noarch İncele
170Red Hat7Server-RH7-RHOSE-3.1:nodejs-kind-of-0:3.0.2-1.el7aos.src İncele
171Red Hat7Server-RH7-RHOSE-3.1:nodejs-latest-version-0:2.0.0-1.el7aos.noarch İncele
172Red Hat7Server-RH7-RHOSE-3.1:nodejs-latest-version-0:2.0.0-1.el7aos.src İncele
173Red Hat7Server-RH7-RHOSE-3.1:nodejs-lazy-cache-0:1.0.2-1.el7aos.noarch İncele
174Red Hat7Server-RH7-RHOSE-3.1:nodejs-lazy-cache-0:1.0.2-1.el7aos.src İncele
175Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.assign-0:3.2.0-1.el7aos.noarch İncele
176Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.assign-0:3.2.0-1.el7aos.src İncele
177Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.baseassign-0:3.2.0-1.el7aos.noarch İncele
178Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.baseassign-0:3.2.0-1.el7aos.src İncele
179Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.basecopy-0:3.0.1-1.el7aos.noarch İncele
180Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.basecopy-0:3.0.1-1.el7aos.src İncele
181Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.bindcallback-0:3.0.1-1.el7aos.noarch İncele
182Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.bindcallback-0:3.0.1-1.el7aos.src İncele
183Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.createassigner-0:3.1.1-1.el7aos.noarch İncele
184Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.createassigner-0:3.1.1-1.el7aos.src İncele
185Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.defaults-0:3.1.2-1.el7aos.noarch İncele
186Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.defaults-0:3.1.2-1.el7aos.src İncele
187Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.getnative-0:3.9.1-1.el7aos.noarch İncele
188Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.getnative-0:3.9.1-1.el7aos.src İncele
189Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.isarguments-0:3.0.4-1.el7aos.noarch İncele
190Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.isarguments-0:3.0.4-1.el7aos.src İncele
191Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.isarray-0:3.0.4-1.el7aos.noarch İncele
192Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.isarray-0:3.0.4-1.el7aos.src İncele
193Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.isiterateecall-0:3.0.9-1.el7aos.noarch İncele
194Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.isiterateecall-0:3.0.9-1.el7aos.src İncele
195Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.keys-0:3.1.2-1.el7aos.noarch İncele
196Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.keys-0:3.1.2-1.el7aos.src İncele
197Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.restparam-0:3.6.1-1.el7aos.noarch İncele
198Red Hat7Server-RH7-RHOSE-3.1:nodejs-lodash.restparam-0:3.6.1-1.el7aos.src İncele
199Red Hat7Server-RH7-RHOSE-3.1:nodejs-lowercase-keys-0:1.0.0-2.el7aos.noarch İncele
200Red Hat7Server-RH7-RHOSE-3.1:nodejs-lowercase-keys-0:1.0.0-2.el7aos.src İncele
Total Affected Vendor: 1|Products: 200

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Bu CVE benim Red Hat ürünümü etkiliyor mu?

Sonuçlar doğrudan Red Hat CSAF VEX ürün durumundan gelir; tahmin değildir.

Düzeltme yayımlandı

Bu ürün dalı için Red Hat düzeltmesi yayımlanmış.

Red Hat düzeltmeleri

Before applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 2.2 Release Notes, which will be updated shortly for release 2.2.9, for important instructions on how to fully apply this asynchronous errata update: https://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at: https://access.redhat.com/articles/11258 Before applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 3.1 documentation, which will be updated shortly for release 3.1.1, for important instructions on how to upgrade your OpenShift cluster and fully apply this asynchronous errata update: https://docs.openshift.com/enterprise/3.1/release_notes/ose_3_1_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
5.0cvss_v2—AV:N/AC:L/Au:N/C:P/I:N/A:NRed Hat

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Yama doğrulandı

4 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

redhat

Before applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 2.2 Release Notes, which will be updated shortly for release 2.2.9, for important instructions on how to fully apply this asynchronous errata update: https://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

Before applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 3.1 documentation, which will be updated shortly for release 3.1.1, for important instructions on how to upgrade your OpenShift cluster and fully apply this asynchronous errata update: https://docs.openshift.com/enterprise/3.1/release_notes/ose_3_1_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Kaynağı aç
reference

Before applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 2.2 Release Notes, which will be updated shortly for release 2.2.9, for important instructions on how to fully apply this asynchronous errata update: https://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at: https://access.redhat.com/articles/11258

Kaynağı aç
reference

Before applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 3.1 documentation, which will be updated shortly for release 3.1.1, for important instructions on how to upgrade your OpenShift cluster and fully apply this asynchronous errata update: https://docs.openshift.com/enterprise/3.1/release_notes/ose_3_1_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.

Kaynağı aç
canonical

Apply updates per vendor instructions.

Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Kanıtta belirtilen resmî güncellemeyi yalnızca eşleşen ürün ve sürüme uygulayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

Bu CVE CISA KEV kataloğunda aktif sömürülen olarak işaretli; ancak henüz doğrulanmış, indirilebilir bir public PoC veya Metasploit modülü bulunamadı. Aktif sömürü kanıtı public exploit kodu bulunduğu anlamına gelmez.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2015-5317 is associated with the following CWEs:

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-20: Improper Input Validation

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2015-5317 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimAğ üzerinden
Yetki—
Kullanıcı—

Resmi Kaynaklar ve Danışma Bültenleri

Canonical URLvendor-advisoryRHBZ#1282359vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2015-5317vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2015-5317vendor-advisoryhttps://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11vendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryBefore applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 2.2 Release Notes, which will be updated shortly for release 2.2.9, for important instructions on how to fully apply this asynchronous errata update: https://access.redhat.com/documentation/en-US/OpenShift_Enterprise/2/html-single/2.2_Release_Notes/index.html#chap-Asynchronous_Errata_Updates This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at: https://access.redhat.com/articles/11258patchBefore applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 3.1 documentation, which will be updated shortly for release 3.1.1, for important instructions on how to upgrade your OpenShift cluster and fully apply this asynchronous errata update: https://docs.openshift.com/enterprise/3.1/release_notes/ose_3_1_release_notes.html This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258.patch

CVSS Vektör Radar Grafiği

5.0 / 10
Attack VectorNetworkComplexityLowPrivilegesHighUser Interact.RequiredConfidentialityLowIntegrityNoneAvailabilityNone

Vulnerability Scoring Details

AV:N/AC:L/Au:N/C:P/I:N/A:N
Attack VectorNetwork (Ağ)
Attack ComplexityLow (Düşük)
Privileges Required—
User Interaction—
Confidentiality (Gizlilik)Low (Düşük)
Integrity (Bütünlük)None (Yok)
Availability (Erişilebilirlik)None (Yok)

Yama doğrulandı

4 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Üreticiyi takip et

RH
Red Hat logo
Red Hat

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2015-5317"