CVSS 3.0
4.3 mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NCVE-2016-3727
Medium (4.3). EPSS 2.3% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.main:jenkins-core 1.651.2, 2.3.
The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.
Severity
- EPSS
- 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:jenkins
- redhat:openshift
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6cr3-cm5h-8q96 | Maven | org.jenkins-ci.main:jenkins-core | >=1.652 <2.3 | 2.3 |
| GHSA-6cr3-cm5h-8q96 | Maven | org.jenkins-ci.main:jenkins-core | <1.651.2 | 1.651.2 |