CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2015-11-25
Jenkins Fingerprints Information Disclosure Vulnerability (CVE-2015-5317) Analysis & Mitigation Guide
[Affected Scope] Jenkins weekly versions prior to 1.638 and LTS versions prior to 1.625.2
[Impact] Unauthenticated remote attackers can obtain sensitive job and build name information via direct HTTP requests to fingerprint pages.
[Mitigation] Immediately upgrade Jenkins to LTS 1.625.2+ or weekly 1.638+, and restrict unauthorized access to the fingerprint endpoints.