Lucene search
+L

CVE-2017-1000395

🗓️ 26 Jan 2018 02:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 102 Views🌐 WEB

Jenkins 2.73.1 and earlier, 2.83 and earlier exposes user information via remote AP

Related
Detection
Refs
Paths
NVD
Node
OR
jenkinsjenkinsRange2.73.1lts
jenkinsjenkinsRange2.83-
ParameterPositionPathDescriptionCWE
usernamepath/user/(username)/apiInformation disclosure of Jenkins user accounts via the remote API; non-admin users with Overall/Read permissions can access user IDs and names, potentially exposed emails if Mailer Plugin is installed.CWE-200

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:59Current
4.6Medium risk
Vulners AI Score4.6
CVSS 24
CVSS 34.3
EPSS0.01327
102