CVE-2015-1806

CVE-2015-1806 describes a privilege escalation and arbitrary code execution vulnerability in Jenkins versions prior to 1.600 and LTS before 1.596.1, specifically affecting the combination filter Groovy script. This flaw allows authenticated users with job configuration permissions to compromise the master server. With a CVSS score of 6.5, it is considered a medium-severity vulnerability, requiring network access and user authentication for exploitation, leading to potential confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.