CVE-2017-2606

Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible SECURITY-380. This only affects anonymous users other users legitimately have access that were able to get a list of items via an...

CVE-2017-2606

CVE-2017-2606 affects Jenkins prior to 2.44 and prior to 2.32.2, exposing item names via the internal API to anonymous users via UnprotectedRootAction. Root cause: information exposure from the internal API due to insufficient access controls. Impact: information disclosure of item names. Remedia...