# CVE-2015-5317

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

- Page: https://www.vulneraibility.com/cve/CVE-2015-5317
- CVSS: 7.5
- Known exploited: yes, in CISA KEV since 2023-05-12; CISA due date 2023-06-02
- EPSS: 23.00% (percentile 97.8)
- CISA SSVC: exploitation active, automatable yes, technical impact partial (assessed 2025-02-07)
- Weakness: CWE-200
- Published: 2015-11-25

## Affected

- jenkins:jenkins
- redhat:openshift

## References

- [advisory] http://rhn.redhat.com/errata/RHSA-2016-0489.html
- [advisory] https://access.redhat.com/errata/RHSA-2016:0070
- [other] https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5317

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.