Description
Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users' configured timezone and to enumerate view names of other users' "My Views".
Remediation
References
Related Vulnerabilities
WordPress Plugin Display Posts Shortcode Unspecified Vulnerability (1.9)
WordPress Plugin Rezgo Online Booking Cross-Site Scripting (4.1.7)
PHP Improper Input Validation Vulnerability (CVE-2007-6039)
Next.js Incorrect Authorization Vulnerability (CVE-2024-51479)
WordPress Plugin DSGVO All in one for WP Cross-Site Scripting (4.1)