Information Disclosure

2021-01-2108:57:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

22.0%

JSON

jenkins is vulnerable to information disclosure. A missing permission check allows an attacker with Overall/Read permission to obtain a list of names of configured Mercurial installations.

CPENameOperatorVersion
jenkins-2-pluginseq4.4.1598545590__1.el7
jenkins-2-pluginseq4.1.1583850385__1.el7
jenkins-2-pluginseq3.11.1603460090__1.el7
jenkins-2-pluginseq3.11.1549642489__1.el7
jenkins-2-pluginseq3.11.1579107288__1.el7
jenkins-2-pluginseq4.3.1593080425__1.el7
jenkins-2-pluginseq4.1.1556549703__1.el7
jenkins-2-pluginseq3.7.1502412812__1.el7
jenkins-2-pluginseq3.11.1593081747__1.el7
jenkins-2-pluginseq3.11.1560870549__1.el7

Name	Operator	Version
jenkins-2-plugins	eq	4.4.1598545590__1.el7
jenkins-2-plugins	eq	4.1.1583850385__1.el7
jenkins-2-plugins	eq	3.11.1603460090__1.el7
jenkins-2-plugins	eq	3.11.1549642489__1.el7
jenkins-2-plugins	eq	3.11.1579107288__1.el7
jenkins-2-plugins	eq	4.3.1593080425__1.el7
jenkins-2-plugins	eq	4.1.1556549703__1.el7
jenkins-2-plugins	eq	3.7.1502412812__1.el7
jenkins-2-plugins	eq	3.11.1593081747__1.el7
jenkins-2-plugins	eq	3.11.1560870549__1.el7