Contact us
Vulnerability lookup

CVE-2017-2609

medium CVSS 4.3 EPSS 1.8%

jenkins before versions 2.44, 2.32.2 is vulnerable to an information disclosure vulnerability in search suggestions (SECURITY-385). The autocomplete feature on the search box discloses the names of the views in its suggestions, including the ones for which the current user does not have access to.

Versions it affects

Software versions checked with the free lookup that CVE-2017-2609 applies to, and the release that fixes it where the sources name one.

At a glance

Severity
Medium
CVSS base score
4.3 out of 10
Known exploited
Not in CISA's catalogue of exploited vulnerabilities
EPSS
1.8% probability of exploitation in the next 30 days, higher than 78% of scored vulnerabilities
Weakness
CWE-200
Published
2018-05-22

Is this running somewhere in your estate?

The Vulnerability Reporter inventories every machine and tells you when an advisory like this one applies to you.