Описание
Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.
Дополнительная информация
Статус:
Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1282367jenkins: Queue API did show items not visible to the current user (SECURITY-186)
EPSS
Процентиль: 51%
0.00284
Низкий
4.3 Medium
CVSS2
Связанные уязвимости
ubuntu
около 10 лет назад
Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.
nvd
около 10 лет назад
Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to queue/api.
debian
около 10 лет назад
Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to ...
github
больше 3 лет назад
Jenkins allows Unauthorized Viewing of Queue API Information
EPSS
Процентиль: 51%
0.00284
Низкий
4.3 Medium
CVSS2