Description

Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine other users' configured timezone and to enumerate view names of other users' "My Views".

Remediation

References

CVE-2026-53439

Related Vulnerabilities

Atlassian Confluence CVE-2023-22512 Vulnerability (CVE-2023-22512)

WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.2)

WordPress Plugin Really Easy Slider TimThumb Arbitrary File Upload (0.1)

WordPress Plugin Analyticator Cross-Site Request Forgery (6.4.9.3)

PHP Other Vulnerability (CVE-2000-0967)

Severity

Medium

Classification

CVE-2026-53439 CWE-862 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities