Описание
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page.
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=1797062jenkins: Exposed session identifiers on user detail object in the whoAmI diagnostic page
4.4 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.4
nvd
около 6 лет назад
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page.
CVSS3: 5.4
debian
около 6 лет назад
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session ide ...
CVSS3: 5.4
github
больше 3 лет назад
Jenkins Diagnostic page exposed session cookies
4.4 Medium
CVSS3