TRUTH

Forced API token change

SECURITY-180/CVE-2015-1814

https://jenkins.io/security/advisory/2015-03-23/#security-180cve-2015-1814-forced-api-token-change

Affected Versions

All Jenkins releases <= 1.605
All LTS releases <= 1.596.1

PoC
Tested against Jenkins 1.605

Burp output

Validate new token works

Print Share Comment Cite Upload Translate

APA

() » Jenkins – SECURITY-180/CVE-2015-1814 PoC. Retrieved from https://www.truth.cx/2019/02/28/jenkins-security-180-cve-2015-1814-poc/.

MLA

" » Jenkins – SECURITY-180/CVE-2015-1814 PoC." - , https://www.truth.cx/2019/02/28/jenkins-security-180-cve-2015-1814-poc/

HARVARD

» Jenkins – SECURITY-180/CVE-2015-1814 PoC., viewed ,

VANCOUVER

- » Jenkins – SECURITY-180/CVE-2015-1814 PoC. [Internet]. [Accessed ]. Available from: https://www.truth.cx/2019/02/28/jenkins-security-180-cve-2015-1814-poc/

CHICAGO

" » Jenkins – SECURITY-180/CVE-2015-1814 PoC." - Accessed . https://www.truth.cx/2019/02/28/jenkins-security-180-cve-2015-1814-poc/

IEEE

" » Jenkins – SECURITY-180/CVE-2015-1814 PoC." [Online]. Available: https://www.truth.cx/2019/02/28/jenkins-security-180-cve-2015-1814-poc/. [Accessed: ]

Select a language:

<span style="font-family: inherit;"><b>Forced API token change</b></span><br /><span style="font-family: inherit;"><b><br /></b></span><span style="font-family: inherit;">SECURITY-180/CVE-2015-1814</span><br /><br /><div><a href="https://jenkins.io/security/advisory/2015-03-23/#security-180cve-2015-1814-forced-api-token-change" ><span style="font-family: inherit;">https://jenkins.io/security/advisory/2015-03-23/#security-180cve-2015-1814-forced-api-token-change</span></a></div><div><span style="font-family: inherit;"><br /></span></div><div><div class="sect1" style="background-color: white; box-sizing: border-box; color: #212529;"><h2 id="affected-versions" style="box-sizing: border-box; color: inherit; line-height: 1.2; margin-bottom: 0.5rem; margin-top: 0px;"><span style="font-family: inherit; font-size: small;">Affected Versions<span style="font-stretch: normal; font-weight: 500; line-height: 1; padding: 0.4em 1em 0.4em 0.375em;"><a aria-label="Anchor" class="anchorjs-link " data-anchorjs-icon="" href="https://jenkins.io/security/advisory/2015-03-23/#affected-versions" style="background-color: transparent; box-sizing: border-box; color: #006699; font-stretch: normal; line-height: 1; opacity: 0; padding: 0.4em 1em 0.4em 0.375em;"></a></span></span></h2><div class="sectionbody" style="box-sizing: border-box;"><div class="ulist" style="box-sizing: border-box;"><ul style="box-sizing: border-box; margin-bottom: 1rem; margin-top: 0px;"><li style="box-sizing: border-box;"><div style="box-sizing: border-box; padding: 0px;"><span style="font-family: inherit;">All Jenkins releases <= 1.605</span></div></li><li style="box-sizing: border-box;"><div style="box-sizing: border-box; padding: 0px;"><span style="font-family: inherit;">All LTS releases <= 1.596.1</span></div></li></ul><div><span style="font-family: inherit;"><br /></span></div><div><span style="font-family: inherit;">PoC</span><br /><span style="font-family: inherit;">Tested against Jenkins 1.605</span></div><div><script src="https://gist.github.com/carnal0wnage/fad7c95492224e609ddc47fb08ac8438.js"></script><span style="font-family: "times" , "times new roman" , serif;"><br /></span></div><div><span style="font-family: "times" , "times new roman" , serif;"><br /></span></div><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="https://4.bp.blogspot.com/-dv5CGnEj7vM/XHcvdVVonbI/AAAAAAAACbg/OLAQlbwCxdUVNpc-nke4D5H3Gx0C8zjnQCLcBGAs/s1600/Screen%2BShot%2B2019-02-27%2Bat%2B7.46.30%2BPM.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="455" data-original-width="1600" height="180" src="https://4.bp.blogspot.com/-dv5CGnEj7vM/XHcvdVVonbI/AAAAAAAACbg/OLAQlbwCxdUVNpc-nke4D5H3Gx0C8zjnQCLcBGAs/s640/Screen%2BShot%2B2019-02-27%2Bat%2B7.46.30%2BPM.png" width="640" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;">Burp output</td></tr></tbody></table><div><span style="font-family: "times" , "times new roman" , serif;"><br /></span></div><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="https://2.bp.blogspot.com/-D1tmH-wiy5g/XHcvspHKg8I/AAAAAAAACbk/3Rt6uwdJiRMsipOZkRWzXJP3nZOqSXTbgCLcBGAs/s1600/Screen%2BShot%2B2019-02-27%2Bat%2B7.47.37%2BPM.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="379" data-original-width="1600" height="150" src="https://2.bp.blogspot.com/-D1tmH-wiy5g/XHcvspHKg8I/AAAAAAAACbk/3Rt6uwdJiRMsipOZkRWzXJP3nZOqSXTbgCLcBGAs/s640/Screen%2BShot%2B2019-02-27%2Bat%2B7.47.37%2BPM.png" width="640" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;">Validate new token works</td></tr></tbody></table><div><span style="font-family: "times" , "times new roman" , serif;"><br /></span></div><div><br /><br /></div></div></div></div><div class="sect1" style="background-color: white; box-sizing: border-box; color: #212529; font-family: lato, Roboto, "Open Sans", sans-serif; font-size: 14px;"></div></div>

First name:

Last name:

Affected Versions

Related Posts