CVE-2026-117625

Jenkins Project Jenkins

Non disponible

En bref

Source: CVE.org
État: PUBLISHED
Publiée: 2026-10-28 16:48 UTC
Mise à jour: 2026-10-28 16:48 UTC
Attribuée par: jenkins

Description

A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to obtain the server, port, user name, and no-proxy host list of the configured HTTP proxy.

Références

https://www.jenkins.io/security/advisory/2026-10-28/#SECURITY-4206

Références européennes

ENISA EUVD · EUVD-2026-112190
GCVE · GCVE-0-2026-117625

Produits affectés

Produit	Versions
Jenkins Project · Jenkins	unaffected 2.588 < * ; unaffected 2.580.2 < 2.580.*

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
ENISA EUVD	ENISA — reproduction authorised, source acknowledged