CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects Jenkins. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-59475
Severity
MEDIUM
CVSS
4.3
EPSS
0.45%
Jenkins
Original NVD Description
Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu (e.g., whether Credentials Plugin is installed).
Related CVEs
Other vulnerabilities affecting the same vendor(s)