CVE-2016-3723

4

MEDIUMCVSS v2

Published

May 17, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified XML/JSON API endpoints.

jenkinsci/jenkins

GitHubJenkins automation server

<= 2.2, <= 1.651.1NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 2.2, <= 1.651.1NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 2.2, <= 1.651.1NVD

jenkins

Docker HubDEPRECATED; use "jenkins/jenkins:lts" instead

<= 2.2, <= 1.651.1NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 2.2, <= 1.651.1NVD

Security Advisories

CVE-2016-3723

Description

More on this CVE