| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.main:jenkins-core | ≥ 1.652, < 2.3< 1.651.2 | 2.31.651.2 |
| jenkins | ≤ 1.649≤ 1.651.1 | |
| openshift | = 3.1= 3.2 |
Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free