Jenkins Multiple Vulnerabilities
Release Date: 11 Dec 2025
RISK: Medium Risk
TYPE: Servers - Internet App Servers
Multiple vulnerabilities were identified in Jenkins. A remote attacker could exploit some of these vulnerabilities to trigger spoofing, denial of service condition and sensitive information disclosure on the targeted system.
Impact
- Information Disclosure
- Spoofing
- Denial of Service
System / Technologies affected
- Jenkins weekly 2.540 and earlier versions
- Jenkins LTS 2.528.2 and earlier versions
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
沒有留言:
發佈留言