Threats tagged 'ghsa-67v4-38h7-9jjp'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 5.0%	CVE-2025-59474Org.jenkins ci.main:jenkins core: Jenkins has a missing permission check, allowing users to obtain agent names Medium5.3EPSS 5.0%2025-09-17GCVE DatabaseCVE-2025-59474 Jenkins versions 2.527 and earlier, including LTS 2.516.2 and earlier, have a missing permission check in the sidepanel of a page accessible to users without Overall/Read permission. This flaw allows unauthorized users to list agent names via the sidepanel executors widget. The issue is fixed in Jenkins 2.516.3 and 2.528 by removing the vulnerable sidepanel from the affected view. EPSS 5.0%Report on CVE-2025-59474 Vulnerability CWE-862 #ghsa-67v4-38h7-9jjp #maven	GCVE Database	2025-09-17

Page 1 of 1