CVE-2016-3724: Jenkins

Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days.

Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration.

Affected products

• Jenkins Jenkins: up to and including 1.649; up to and including 1.651.1
• Red Hat Openshift: version 3.1 only; version 3.2 only

Published 2016-05-17. Last modified 2026-06-17.