Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade jenkins2Upgrade jenkinsUpgrade jenkins-lts | Dec 10, 2025 | May 12, 2016 |
| Jenkins 2016 05 11 | — | Upgrade Jenkins to version 2.3Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to the latest versionUpgrade Jenkins LTS to version 1.651.2 | Nov 13, 2017 | May 17, 2016 |
| Redhat Openshift | — | Upgrade rubygem-openshift-origin-frontend-haproxy-sni-proxyUpgrade openshift-origin-cartridge-pythonUpgrade libcgroupUpgrade openshift-origin-node-proxyUpgrade ImageMagickUpgrade jenkins-plugin-openshift-pipelineUpgrade openshift-origin-cartridge-jbossewsUpgrade rhcUpgrade openshift-origin-cartridge-perlUpgrade openshift-origin-cartridge-phpUpgrade openshift-origin-cartridge-jbosseapUpgrade openshift-origin-cartridge-nodejsUpgrade openshift-origin-cartridge-cronUpgrade rubygem-openshift-origin-admin-consoleUpgrade activemqUpgrade openshift-origin-cartridge-jenkins-clientUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade openshift-origin-cartridge-jenkinsUpgrade rubygem-openshift-origin-nodeUpgrade openshift-origin-cartridge-haproxyUpgrade openshift-origin-node-utilUpgrade openshift-origin-cartridge-rubyUpgrade openshift-origin-brokerUpgrade rubygem-openshift-origin-controllerUpgrade rubygem-openshift-origin-routing-daemonUpgrade openshift-origin-cartridge-mysqlUpgrade jenkinsUpgrade openshift-origin-msg-node-mcollectiveUpgrade openshift-origin-cartridge-diyUpgrade openshift-origin-broker-utilUpgrade openshift-origin-cartridge-mongodb | Jun 18, 2018 | May 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub