Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified XML/JSON API endpoints.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade jenkinsUpgrade jenkins-ltsUpgrade jenkins2 | Dec 10, 2025 | May 12, 2016 |
| Jenkins 2016 05 11 | — | Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 1.651.2Upgrade Jenkins to version 2.3 | Nov 13, 2017 | May 17, 2016 |
| Redhat Openshift | — | Upgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade libcgroupUpgrade openshift-origin-cartridge-haproxyUpgrade rubygem-openshift-origin-frontend-haproxy-sni-proxyUpgrade jenkins-plugin-openshift-pipelineUpgrade openshift-origin-cartridge-mysqlUpgrade rubygem-openshift-origin-routing-daemonUpgrade openshift-origin-cartridge-diyUpgrade openshift-origin-msg-node-mcollectiveUpgrade jenkinsUpgrade rubygem-openshift-origin-admin-consoleUpgrade openshift-origin-cartridge-rubyUpgrade openshift-origin-cartridge-pythonUpgrade ImageMagickUpgrade openshift-origin-cartridge-jbossewsUpgrade rubygem-openshift-origin-nodeUpgrade rhcUpgrade openshift-origin-cartridge-cronUpgrade openshift-origin-node-proxyUpgrade openshift-origin-broker-utilUpgrade openshift-origin-cartridge-nodejsUpgrade activemqUpgrade openshift-origin-brokerUpgrade openshift-origin-node-utilUpgrade openshift-origin-cartridge-jbosseapUpgrade openshift-origin-cartridge-perlUpgrade openshift-origin-cartridge-mongodbUpgrade openshift-origin-cartridge-phpUpgrade openshift-origin-cartridge-jenkinsUpgrade openshift-origin-cartridge-jenkins-clientUpgrade rubygem-openshift-origin-controller | Jun 18, 2018 | May 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub