CVE-2015-5298 - AskarLabs CVE Database

CVE-2015-5298

Vendor N/A

Product Jenkins Google Login Plugin

Weakness CWE-287 · Improper authentication

Published July 7, 2022

Last update August 6, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be locked down to a particular Google Apps domain through client-side request modification.

Key dates

02Disclosure timeline

July 7, 2022 CVE published

August 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2015-5298 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2026-33409 Parse Server: Auth provider validation bypass on login via partial authData CVE-2026-5570 Technostrobe HI-LED-WR120-G2 LoginCB index_config improper authentication CVE-2026-10777 ealpha072 Student-Management-System Administrative Backend config.php improper authentication CVE-2021-3784 Garuda Linux Improper Authorization CVE-2022-43900 IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps security bypass