Description
Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible (SECURITY-380). This only affects anonymous users (other users legitimately have access) that were able to get a list of items via an UnprotectedRootAction.
Remediation
References
Related Vulnerabilities
WordPress Plugin CM Pop-Up banners for WordPress Cross-Site Scripting (1.4.10)
Microsoft SQL Server Other Vulnerability (CVE-2000-1083)
Oracle JRE CVE-2013-5776 Vulnerability (CVE-2013-5776)
WordPress Plugin Cart66 Lite::WordPress Ecommerce SQL Injection (1.5.1.17)
Oracle Database Server CVE-2012-3146 Vulnerability (CVE-2012-3146)