Medium severity5.3NVD Advisory· Published Apr 16, 2018· Updated Jun 17, 2026

CVE-2018-1000169

Description

An exposure of sensitive information vulnerability exists in Jenkins 2.115 and older, LTS 2.107.1 and older, in CLICommand.java and ViewOptionHandler.java that allows unauthorized attackers to confirm the existence of agents or views with an attacker-specified name by sending a CLI command to Jenkins.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jenkins-ci.main:jenkins-coreMaven	< 2.107.2	2.107.2
org.jenkins-ci.main:jenkins-coreMaven	>= 2.108, < 2.116	2.116

Affected products

ghsa-coords
pkg:maven/org.jenkins-ci.main/jenkins-core
Range: < 2.107.2

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-cpw3-x7gf-p872ghsaADVISORY
jenkins.io/security/advisory/2018-04-11/nvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2018-1000169ghsaADVISORY
access.redhat.com/errata/RHBA-2018:1816nvdWEB
github.com/jenkinsci/jenkins/commit/69a784bb8d2c5a021d225eda2d392fb081c1169eghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000