AI Score
Confidence
High
EPSS
Percentile
70.3%
The sidepanel widgets in the CLI command overview and help pages in Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to the pages.
rhn.redhat.com/errata/RHSA-2016-0489.html
access.redhat.com/errata/RHSA-2016:0070
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11