CVE-2023-27904

MEDIUM

Jenkins < 2.375.4, 2.376-2.387.1, < 2.394 - Information Exposure via Agent Connection Error Stack Trace

Title source: llm

Description

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory

https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2120

Scores

CVSS v3 5.3

EPSS 0.0050

EPSS Percentile 66.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (3)

jenkins/jenkins < 2.375.4

jenkins/jenkins < 2.394

org.jenkins-ci.main/jenkins-core 2.376 - 2.387.1Maven

Published Mar 10, 2023

Tracked Since Feb 18, 2026