PT-2026-48424

CVE-2026-53439

·

Published

2026-06-10

·

Updated

2026-08-12

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.567 Jenkins LTS versions prior to 2.555.2
Description Missing permission checks allow attackers with Overall/Read permission to determine the configured timezone of other users and enumerate view names within other users' "My Views".
Recommendations Update to version 2.567 or later. Update to LTS version 2.555.2 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2026-53439
BDU:2026-15343
GHSA-G28P-6MCC-V4RV
BIT-JENKINS-2026-53439
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com