What is GHSA-4653-rmch-3g2g?

GHSA-4653-rmch-3g2g is a security advisory published by GitHub Security Advisories with Medium severity. Jenkins has Information Disclosure via Sidepanel Widget

Which CVE IDs does GHSA-4653-rmch-3g2g cover?

GHSA-4653-rmch-3g2g covers the following CVE IDs: CVE-2015-5321. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-4653-rmch-3g2g?

GHSA-4653-rmch-3g2g affects 2 products, including: maven/org.jenkins-ci.main:jenkins-core:\u003e= 1.626, \u003c 1.638; maven/org.jenkins-ci.main:jenkins-core:\u003c 1.625.2.

GHSA-4653-rmch-3g2gMedium

Jenkins has Information Disclosure via Sidepanel Widget

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

March 13, 2025

🔗 CVE IDs covered (1)

CVE-2015-5321 →

📋 Description

The sidepanel widgets in the CLI command overview and help pages in Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to the pages.

🎯 Affected products2

maven/org.jenkins-ci.main:jenkins-core:>= 1.626, < 1.638
maven/org.jenkins-ci.main:jenkins-core:< 1.625.2

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2015-5321
https://access.redhat.com/errata/RHSA-2016:0070
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
http://rhn.redhat.com/errata/RHSA-2016-0489.html
https://github.com/jenkinsci/jenkins/commit/251bdb00ab3cf4435416f0a55fa3bccf7f58896a
https://github.com/jenkinsci/jenkins/commit/9e439d462c28fe1c96799c89709dc5d0cb8ab8fa
https://github.com/advisories/GHSA-4653-rmch-3g2g