Description
Jenkins is an award-winning application that monitors executions of repeated jobs, such as building a software project or jobs run by cron.
By accessing the endpoint /asynchPeople it was possible to get list of the Jenkins users.
Remediation
It's recommended to restrict access to this endpoint.
References
Related Vulnerabilities
Custom Error Pages Are Not Configured in WEB-INF/web.xml
Unrestricted access to NGINX+ API interface (read only)
PHP open_basedir Is Not Configured
WordPress Plugin Order Export & Order Import for WooCommerce Information Disclosure (1.0.8)
WordPress Plugin MasterStudy LMS-for Online Courses and Education Information Disclosure (3.2.10)