Description

An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.

Remediation

References

CVE-2018-1000169

Related Vulnerabilities

WordPress Plugin iubenda-All-in-one Compliance for GDPR/CCPA Cookie Consent + more Unspecified Vulnerability (2.3.4)

MySQL CVE-2019-2815 Vulnerability (CVE-2019-2815)

MySQL CVE-2018-3144 Vulnerability (CVE-2018-3144)

WordPress Plugin WooCommerce Anti-Fraud Security Bypass (3.2)

WordPress Plugin Survey Maker-Best WordPress Survey SQL Injection (3.1.1)

Severity

Medium

Classification

CVE-2018-1000169 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities