Jenkins User Interface (UI) Information Disclosure Vulnerability
Jenkins · Jenkins User Interface (UI)
Date added (CISA)
2023-05-12
Remediation due
2023-06-02
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages.