Jenkins < 2.107.2 / 2.116 Multiple Vulnerabilities

The version of Jenkins running on the remote web server is prior to 2.116 or is a version of Jenkins LTS prior to 2.107.2. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported versio...

CVE-2018-1000169

CVE-2018-1000169 affects Jenkins 2.115 and older (and LTS 2.107.1 and older). The vulnerability arises in CLICommand.java and ViewOptionHandler.java, allowing an unauthenticated attacker to determine the existence of agents or views by sending a crafted CLI command to Jenkins. Public sources in c...