Lucene search
+L

2 matches found

OSV
OSV
added 2022/05/17 3:53 a.m.7 views

GHSA-5XM3-48V5-6H7V Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code

Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code...

5.3CVSS7.2AI score0.01361EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2022/05/17 3:53 a.m.16 views

Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code

Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code...

4CVSS5.5AI score0.01361EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder