CVE-2016-3723

Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified XML/JSON API endpoints...

PT-2016-5680

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.3 Jenkins LTS versions prior to 1.651.2 Description The issue allows remote authenticated users with read access to obtain sensitive plugin installation information. This is achieved by leveraging missing permission...

CVE-2016-3723: Exposure of Sensitive Information to an Unauthorized Actor

Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified XML/JSON API endpoints...