VDB
BIT-jenkins-2026-27100
BIT-jenkins-2026-27100
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name.
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | jenkins | 2.483.0, 2.542.0, 2.483.0 |
Timeline
- Feb 20, 2026 CVE Published
- Feb 20, 2026 CVE Updated