← CVE Intelligence

CVE-2025-59474

Jenkins Project / Jenkins PUBLISHED

Description (CNA)

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible to users lacking Overall/Read permission, allowing attackers without Overall/Read permission to list agent names through its sidepanel executors widget.

Affected (CNA)

Vendor / productVersions
Jenkins Project / Jenkinsunaffected 0 before 2.387; unaffected 2.516.3 before 2.516.*; unaffected 2.528 before *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.