Jenkins - SECURITY-180/CVE-2015-1814 PoC

Malware News
1

Forced API token change

SECURITY-180/CVE-2015-1814

https://jenkins.io/security/advisory/2015-03-23/#security-180cve-2015-1814-forced-api-token-change

Affected Versions

  • All Jenkins releases <= 1.605
  • All LTS releases <= 1.596.1

PoC
Tested against Jenkins 1.605


Burp output

Validate new token works



Article Link: http://carnal0wnage.attackresearch.com/2019/02/jenkins-security-180cve-2015-1814-poc.html