vulnerability

Jenkins Advisory 2017-02-01: CVE-2017-2609: Information disclosure vulnerability in search suggestions

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:N/A:N)

Published

Nov 13, 2017

Added

Nov 13, 2017

Modified

Mar 27, 2026

Description

jenkins before versions 2.44, 2.32.2 is vulnerable to an information disclosure vulnerability in search suggestions (SECURITY-385). The autocomplete feature on the search box discloses the names of the views in its suggestions, including the ones for which the current user does not have access to.

Solutions

jenkins-lts-upgrade-2_32_2jenkins-upgrade-2_44

References

CVE-2017-2609
https://attackerkb.com/topics/CVE-2017-2609
CWE-200
DISA_SEVERITY-Category I
EUVD-EUVD-2022-5258
IAVM-2017-A-0037
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5258
https://jenkins.io/security/advisory/2017-02-01/

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report