← Back to CVEs
CVE-2016-3727
N/ADescription
The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.
CVE Details
CVSS v3.1 ScoreN/A
Published5/17/2016
Last Modified4/12/2025
Sourcenvd
Honeypot Sightings0
Affected Products
jenkins:jenkinsredhat:openshift
Weaknesses (CWE)
CWE-200
References
http://rhn.redhat.com/errata/RHSA-2016-1773.html(secalert@redhat.com)
https://access.redhat.com/errata/RHSA-2016:1206(secalert@redhat.com)
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11(secalert@redhat.com)
https://www.cloudbees.com/jenkins-security-advisory-2016-05-11(secalert@redhat.com)
http://rhn.redhat.com/errata/RHSA-2016-1773.html(af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/errata/RHSA-2016:1206(af854a3a-2127-422b-91ae-364da2661108)
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11(af854a3a-2127-422b-91ae-364da2661108)
https://www.cloudbees.com/jenkins-security-advisory-2016-05-11(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.