Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jenkins | Jenkins | * | 2.375.4 (excluding) |
| Jenkins | Jenkins | * | 2.394 (excluding) |
| OCP-Tools-4.12-RHEL-8 | RedHat | jenkins-0:2.387.1.1683009767-3.el8 | * |
| OCP-Tools-4.12-RHEL-8 | RedHat | jenkins-0:2.414.3.1698293911-3.el8 | * |
| OCP-Tools-4.12-RHEL-8 | RedHat | jenkins-0:2.426.3.1706515686-3.el8 | * |
| OCP-Tools-4.13-RHEL-8 | RedHat | jenkins-0:2.387.3.1684911776-3.el8 | * |
| OCP-Tools-4.13-RHEL-8 | RedHat | jenkins-0:2.401.1.1686680404-3.el8 | * |
| OpenShift Developer Tools and Services for OCP 4.11 | RedHat | jenkins-0:2.387.1.1683009763-3.el8 | * |
| OpenShift Developer Tools and Services for OCP 4.11 | RedHat | jenkins-0:2.401.1.1686831596-3.el8 | * |
| OpenShift Developer Tools and Services for OCP 4.11 | RedHat | jenkins-0:2.414.3.1698298955-3.el8 | * |
| OpenShift Developer Tools and Services for OCP 4.11 | RedHat | jenkins-0:2.426.3.1706516929-3.el8 | * |
| Red Hat OpenShift Container Platform 4.10 | RedHat | jenkins-0:2.387.1.1680701869-1.el8 | * |