CVE-2025-59475

Jenkins (versions 2.527 and earlier , and LTS 2.516.2 and earlier ) is vulnerable to a missing permission check in the authenticated user profile dropdown menu . This flaw allows attackers who lack Overall/Read permissions to obtain limited information about the Jenkins configuration, such as ide...

CVE-2025-59475

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu e.g.,...