Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-1000169

Опубликовано: 16 апр. 2018
Источник: nvd
CVSS3: 5.3
CVSS2: 5
EPSS Низкий

Описание

An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*
Версия до 2.105 (включая)
cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*
Версия до 2.107.1 (включая)

EPSS

Процентиль: 40%
0.00185
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 3.7
redhat
почти 8 лет назад

An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.

CVSS3: 5.3
debian
почти 8 лет назад

An exposure of sensitive information vulnerability exists in Jenkins 2 ...

CVSS3: 5.3
github
больше 3 лет назад

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

EPSS

Процентиль: 40%
0.00185
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200