CVE-2016-3722: Jenkins

Medium severity, CVSS 4.3. EPSS: 2.3% chance of exploitation in the next 30 days.

Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with multiple accounts to cause a denial of service (unable to login) by editing the "full name."

Affected products

• Jenkins Jenkins: up to and including 1.651.1; up to and including 2.2
• Red Hat Openshift: version 3.1 only; version 3.2 only

Published 2016-05-17. Last modified 2026-06-17.