CVE-2016-3727
Jenkins Exposes Sensitive Information via API URL
4.3 MediumFix available
CVE-2016-3727 is a medium vulnerability (CVSS 4.3) in Jenkins, published May 17, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.31%, the 83rd percentile. Fixed in org.jenkins-ci.main:jenkins-core 2.3.
- Severity
- 4.3 MediumCVSS 3.0, NVD
- Exploit chance
- 2.31%EPSS, 83rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.3org.jenkins-ci.main:jenkins-core +44 more
Description
The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
2.31%Up 1.2 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jenkins-ci.main:jenkins-coreMaven | 1.652 up to 2.3 | 2.3 |
org.jenkins-ci.main:jenkins-coreMaven | before 1.651.2 | 1.651.2 |
org.jenkins-ci.main:jenkins-coreMaven | 1.652 up to 2.3, plus listed versions 1.6531.6541.6551.6561.657 Show 11 moreShow less1.6582.02.0-alpha-12.0-alpha-22.0-alpha-32.0-alpha-42.0-beta-12.0-beta-22.0-rc-12.12.2 | 2.3 |
org.jenkins-ci.main:jenkins-coreMaven | before 1.651.2, plus listed versions 1.3961.3971.3981.3991.400 Show 45 moreShow less1.4011.4031.4041.4051.4061.4071.4081.4091.409.11.409.21.409.31.4101.4111.4121.4131.4141.4151.4161.4171.4181.4191.4201.4211.4221.4231.4241.424.11.424.21.424.31.424.41.424.51.424.61.4251.4261.4271.4281.4291.4301.4311.4321.4331.4341.4351.4361.437 | 1.651.2 |
jenkinsRed Hat:openshift:3.1::el7 From an advisory covering 7 CVEs | before 0:1.651.2-1.el7 | 0:1.651.2-1.el7 |
jenkins-plugin-openshift-pipelineRed Hat:openshift:3.1::el7 From an advisory covering 7 CVEs | before 0:1.0.12-1.el7 | 0:1.0.12-1.el7 |
jenkinsRed Hat:openshift:3.2::el7 From an advisory covering 7 CVEs | before 0:1.651.2-1.el7 | 0:1.651.2-1.el7 |
jenkins-plugin-openshift-pipelineRed Hat:openshift:3.2::el7 From an advisory covering 7 CVEs | before 0:1.0.12-1.el7 | 0:1.0.12-1.el7 |
rhcRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.38.7.1-1.el6op | 0:1.38.7.1-1.el6op |
activemqRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:5.9.0-6.redhat.611463.el6op | 0:5.9.0-6.redhat.611463.el6op |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
activemq-clientRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:5.9.0-6.redhat.611463.el6op | 0:5.9.0-6.redhat.611463.el6op |
openshift-origin-brokerRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.16.3.2-1.el6op | 0:1.16.3.2-1.el6op |
openshift-origin-broker-utilRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.37.6.2-1.el6op | 0:1.37.6.2-1.el6op |
rubygem-openshift-origin-admin-consoleRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.28.2.1-1.el6op | 0:1.28.2.1-1.el6op |
rubygem-openshift-origin-controllerRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.38.6.4-1.el6op | 0:1.38.6.4-1.el6op |
rubygem-openshift-origin-msg-broker-mcollectiveRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.36.2.4-1.el6op | 0:1.36.2.4-1.el6op |
rubygem-openshift-origin-routing-daemonRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:0.26.6.1-1.el6op | 0:0.26.6.1-1.el6op |
openshift-origin-cartridge-jbosseapRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:2.27.4.2-1.el6op | 0:2.27.4.2-1.el6op |
ImageMagickRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
ImageMagick-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
ImageMagick-develRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
ImageMagick-docRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
ImageMagick-perlRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:6.7.2.7-5.el6_8 | 0:6.7.2.7-5.el6_8 |
jenkinsRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.651.2-1.el6op | 0:1.651.2-1.el6op |
libcgroupRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:0.40.rc1-18.el6_8 | 0:0.40.rc1-18.el6_8 |
libcgroup-debuginfoRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:0.40.rc1-18.el6_8 | 0:0.40.rc1-18.el6_8 |
libcgroup-pamRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:0.40.rc1-18.el6_8 | 0:0.40.rc1-18.el6_8 |
openshift-origin-cartridge-cronRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.25.4.2-1.el6op | 0:1.25.4.2-1.el6op |
openshift-origin-cartridge-diyRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.26.2.2-1.el6op | 0:1.26.2.2-1.el6op |
openshift-origin-cartridge-haproxyRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.31.6.2-1.el6op | 0:1.31.6.2-1.el6op |
openshift-origin-cartridge-jbossewsRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.35.5.2-1.el6op | 0:1.35.5.2-1.el6op |
openshift-origin-cartridge-jenkinsRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.29.2.2-1.el6op | 0:1.29.2.2-1.el6op |
openshift-origin-cartridge-jenkins-clientRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.26.1.1-1.el6op | 0:1.26.1.1-1.el6op |
openshift-origin-cartridge-mongodbRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.26.2.2-1.el6op | 0:1.26.2.2-1.el6op |
openshift-origin-cartridge-mysqlRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.31.3.3-1.el6op | 0:1.31.3.3-1.el6op |
openshift-origin-cartridge-nodejsRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.33.1.2-1.el6op | 0:1.33.1.2-1.el6op |
openshift-origin-cartridge-perlRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.30.2.2-1.el6op | 0:1.30.2.2-1.el6op |
openshift-origin-cartridge-phpRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.35.4.2-1.el6op | 0:1.35.4.2-1.el6op |
openshift-origin-cartridge-pythonRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.34.3.2-1.el6op | 0:1.34.3.2-1.el6op |
openshift-origin-cartridge-rubyRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.32.2.2-1.el6op | 0:1.32.2.2-1.el6op |
openshift-origin-msg-node-mcollectiveRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.30.2.2-1.el6op | 0:1.30.2.2-1.el6op |
openshift-origin-node-proxyRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.26.3.1-1.el6op | 0:1.26.3.1-1.el6op |
openshift-origin-node-utilRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.38.7.1-1.el6op | 0:1.38.7.1-1.el6op |
rubygem-openshift-origin-frontend-haproxy-sni-proxyRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:0.5.2.1-1.el6op | 0:0.5.2.1-1.el6op |
rubygem-openshift-origin-nodeRed Hat:openshift:2.0::el6 From an advisory covering 14 CVEs | before 0:1.38.6.4-1.el6op | 0:1.38.6.4-1.el6op |
What each source reports
NVD Score used
The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.
- Record
CVE-2016-3727- CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.
- Record
CVE-2016-3727- Updated
- 2026-11-02
EUVDEUVD-2016-4744No score
The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.
- Record
EUVD-2016-4744- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6cr3-cm5h-8q96
Jenkins Exposes Sensitive Information via API URL
The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.
- Record
GHSA-6cr3-cm5h-8q96- CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSV
The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.
- Record
CVE-2016-3727- CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVGHSA-6cr3-cm5h-8q96
Jenkins Exposes Sensitive Information via API URL
The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sensitive information about the global configuration via unspecified vectors.
- Record
GHSA-6cr3-cm5h-8q96- CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVRHSA-2016:1773
Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.10 security, bug fix, and enhancement update
- Record
RHSA-2016:1773- CVSS 3.0
- 4.8 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-13
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
cloudbees.com/jenkins-security-advisory-2016-05-11
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11
access.redhat.com/errata/RHSA-2016:1206
rhn.redhat.com/errata/RHSA-2016-1773.html
nvd.nist.gov/vuln/detail/CVE-2016-3727
github.com/jenkinsci/jenkins/commit/d66ad6f3ee46a5c6bb865bb831e8cdfc74cd7eb3
Show 76 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1333133
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1206.json
cve.org/CVERecord?id=CVE-2016-3721
foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability
This page doesn't list everything
Left out here: 263 versions. The JSON record has them.