Jenkins
Jenkins Security Advisory 2025-09-17
2025-09-17 Sep 17, 2025 Source: Vendor
Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2025-09-17/. 4 SECURITY issues listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.jenkins.io/security/advisory/2025-09-17/
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
4 lines
Showing 1–4 of 4
CVE-2025-59475
BR2025-0000-008753
SECURITY-3625
unclaimed
Missing permission check in authenticated users' profile menu
Credited as Daniel Beck, CloudBees, Inc.
CVE-2025-59476
BR2025-0000-008754
SECURITY-3424
unclaimed
Log message injection vulnerability
Credited as Manuel Fernandez (Stackhopper Security)
CVE-2025-59474
BR2025-0000-008755
SECURITY-3594
unclaimed
Missing permission check allows obtaining agent names
Credited as Robert Houtenbrink, Faris Mohammed
CVE-2025-59474
BR2025-0000-008756
SECURITY-3594
unclaimed
Missing permission check allows obtaining agent names
Credited as Harsh Yadav from the IBM Cloud Red Team