Описание
Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.
Дополнительная информация
Статус:
Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1282367jenkins: Queue API did show items not visible to the current user (SECURITY-186)
EPSS
Процентиль: 80%
0.02064
Низкий
4.3 Medium
CVSS2
Связанные уязвимости
ubuntu
больше 10 лет назад
Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.
nvd
больше 10 лет назад
Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.
debian
больше 10 лет назад
Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to ...
github
больше 4 лет назад
Jenkins allows Unauthorized Viewing of Queue API Information
EPSS
Процентиль: 80%
0.02064
Низкий
4.3 Medium
CVSS2