Jenkins prior to 1.583 and LTS prior to 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
redhat openshift |
||
jenkins jenkins |