CVE-2024-43045

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to access other users' "My Views".

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Aug 7, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-430465.5There may be information disclosure during memory re-allocation in TZ Secure OS.CVE-2024-430477.8Memory corruption while maintaining memory maps of HLOS memory.CVE-2024-430487.8Memory corruption when invalid input is passed to invoke GPU Headroom API call.CVE-2024-430497.8Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.CVE-2024-43056.8The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block optio CVE-2024-430507.8Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.CVE-2024-430515.5Information disclosure while deriving keys for a session for any Widevine use case.CVE-2024-430527.8Memory corruption while processing API calls to NPU with invalid input.CVE-2024-430537.8Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.CVE-2024-430557.8Memory corruption while processing camera use case IOCTL call.CVE-2024-430566.5Transient DOS during hypervisor virtual I/O operation in a virtual machine.CVE-2024-430577.8Memory corruption while processing command in Glink linux.