Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2016-3725

Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue can be combined with DNS cache poisoning to cause a denial of service (service disruption).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.7%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 5.0
Products affected by CVE-2016-3725


Contact Us

Shodan ® - All rights reserved