SecuritySpace - CVE-2017-2606

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-2606

Description: Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible (SECURITY-380). This only affects anonymous users (other users legitimately have access) that were able to get a list of items via an UnprotectedRootAction.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-2606
BugTraq ID: 95962
http://www.securityfocus.com/bid/95962

CVE ID:	CVE-2017-2606
Description:	Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible (SECURITY-380). This only affects anonymous users (other users legitimately have access) that were able to get a list of items via an UnprotectedRootAction.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-2606 BugTraq ID: 95962 http://www.securityfocus.com/bid/95962