VDB

BIT-JENKINS-2024-43045

BIT-JENKINS-2024-43045 PUBLISHED CVSS 6.300000190734863 MEDIUM

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to access other users' "My Views".

Risk Scores

CVSS 3.1
6.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected Products

VendorProductVersions
Jenkins ProjectJenkins2.452.4, 2.462.1, 2.471

Timeline

  • Aug 7, 2024 CVE Published
  • Aug 7, 2024 PoC Published
  • Jul 12, 2026 PoC Published
  • Jul 13, 2026 PoC Published
  • Jul 14, 2026 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›