The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade jenkinsUpgrade jenkins-ltsUpgrade jenkins2 | Dec 10, 2025 | May 12, 2016 |
| Jenkins 2016 05 11 | — | Upgrade Jenkins to the latest versionUpgrade Jenkins LTS to the latest versionUpgrade Jenkins to version 2.3Upgrade Jenkins LTS to version 1.651.2 | Nov 13, 2017 | May 17, 2016 |
| Redhat Openshift | — | Upgrade rubygem-openshift-origin-routing-daemonUpgrade openshift-origin-cartridge-haproxyUpgrade openshift-origin-cartridge-jenkins-clientUpgrade openshift-origin-cartridge-mysqlUpgrade openshift-origin-cartridge-jenkinsUpgrade ImageMagickUpgrade openshift-origin-cartridge-phpUpgrade activemqUpgrade rubygem-openshift-origin-nodeUpgrade rubygem-openshift-origin-frontend-haproxy-sni-proxyUpgrade openshift-origin-node-utilUpgrade openshift-origin-cartridge-jbossewsUpgrade openshift-origin-cartridge-pythonUpgrade rubygem-openshift-origin-admin-consoleUpgrade rhcUpgrade rubygem-openshift-origin-controllerUpgrade openshift-origin-cartridge-nodejsUpgrade openshift-origin-cartridge-rubyUpgrade openshift-origin-cartridge-cronUpgrade openshift-origin-msg-node-mcollectiveUpgrade openshift-origin-cartridge-jbosseapUpgrade openshift-origin-node-proxyUpgrade openshift-origin-cartridge-diyUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade jenkins-plugin-openshift-pipelineUpgrade openshift-origin-brokerUpgrade jenkinsUpgrade openshift-origin-broker-utilUpgrade libcgroupUpgrade openshift-origin-cartridge-mongodbUpgrade openshift-origin-cartridge-perl | Jun 18, 2018 | May 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub