Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Jenkins Project | Jenkins | affected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Wed, 02 Sep 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-862 | |
| Metrics |
cvssV3_1
|
Wed, 02 Sep 2026 10:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to. | |
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: jenkins
Published:
Updated: 2026-09-02T17:17:43.124Z
Reserved: 2026-09-01T21:55:27.033Z
Link: CVE-2026-84656
Vulnrichment
Updated: 2026-09-02T17:17:37.489Z
NVD
Status : Received
Published: 2026-09-02T16:17:30.273
Modified: 2026-09-02T18:21:31.580
Link: CVE-2026-84656
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-862
Missing Authorization