- Vendor / Project
- Jenkins
- Product
- Jenkins User Interface (UI)
- Date added
- May 12, 2023
- Due date
- Jun 2, 2023
- Known ransomware use
- Unknown
- CWEs
- CWE-200
Description
Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages.
Required action
Apply updates per vendor instructions.