CVE-2020-2103
MEDIUM 5.4EPSS 7.0%
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page.
- Affected
- Jenkins project · Jenkins
- CVSS v3.1 NVD
- 5.4 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - CVSS v2.0 NVD
- 4.0 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N - EPSS
- 7.04% chance of exploitation in the next 30 days, 94th percentile
- Nuclei
- medium · CWE-200
- Published
- 2020-01-29
- Updated
- 2024-08-04
Nuclei templates (1)
Security advisories
- https://jenkins.io/security/advisory/2020-01-29/#SECURITY-1695
- http://www.openwall.com/lists/oss-security/2020/01/29/1
- advisories/GHSA-4jjj-cm7q-v6hr