Description

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

Remediation

References

http://rhn.redhat.com/errata/RHSA-2016-0489.html

https://access.redhat.com/errata/RHSA-2016:0070

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11

Related Vulnerabilities

CVE-2020-7750 Vulnerability in npm package scratch-svg-renderer

CVE-2023-48796 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-alert-server

CVE-2020-28283 Vulnerability in npm package libnested

CVE-2020-7730 Vulnerability in npm package bestzip

CVE-2021-31405 Vulnerability in maven package com.vaadin:vaadin-text-field-flow

Severity

Critical

Classification

CWE-200

Tags

Third Party Advisory Vendor Advisory